last executing test programs: 2m13.420161321s ago: executing program 4 (id=43): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00A'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000140)={@void, @val={0x3, 0x4, 0xb, 0x6, 0x2, 0x4}, @x25={0x3, 0x7, 0xff, "579dbb"}}, 0x9dd7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)="995adea9cb8cbb9cd6231b18ea98b82f77911ba8bdae80fceb2b013f94969bf5bb42373692b95bfbd9d9f8165139bfad2822954f7b21af825a551f8e6842cce81f2311e31797d06bff10c52f4290e0ec4e61b5a35e01e09e6a9003a2f3157f70615aacf7ffc5694271b2e5a9722bc053b7fc91", 0x73, 0xfffffffffffffff8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') read$FUSE(r6, &(0x7f00000061c0)={0x2020}, 0x2020) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) close$fd_v4l2_buffer(r7) pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x4, @meta={0x53465052, 0x345c8ab1, 0x2df3, 0xc63c, 0x43cf633b}}) read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)="cce3d8f7906b5668c08f0b2c1337a07475f9e88c2f3cb0cee50fa1a7837666e630a901aa603bc775a76873502c9111d659b5ac8e9c3221c22a0eb8e2ebdf48c445df878b5657cc33631628838f128f9d509e1502b31471ce93ee5907f0accf60730c543246ed69905edf0461823ea117afe1df499af7718d9975baabca2ee5377d3ef1d022557daffb717b8793b17d43606d917ade23a4a422c03b11e664a1cb22699d55f10be69a5dab5b71ac144433ecbd2d4a8b4f8ed3d42221b2647a28c326c736bf", 0xc4, 0xfffffffffffffffe) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000000)={0x1000f2, 0x102, 0x20000}, 0x20) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 2m11.58588263s ago: executing program 4 (id=53): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4048041}, 0x8000) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b280063301"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m11.353515287s ago: executing program 4 (id=54): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0x54}}, 0x80c4) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x80200) accept4$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80800) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a010300040000000000000200fffe"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 2m11.231793189s ago: executing program 4 (id=55): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008505090581fcffffff00000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffe82, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xc003, 0x5, 0xb, 0x1, 0x7ff, 0x106, 0x2, 0xfffffeff, 0x6, 0x7, 0x8, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m10.983271008s ago: executing program 0 (id=56): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4008811) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x0, 0x2, 0x3}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0xfffffffa, {0xffffffffffffffff}, {0xee00}, 0x4, 0x8000000000000001}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x248, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0x0, 0xff000000, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xff000000], 'vlan1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x32, 0x5, 0x0, 0xe0}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xda, 0x28, "7eed4936aa4d30a2095b240a155fa6367f2f5307ae868132f9cf35b6ae43"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x25f}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xffffff00, 0xff000000, 0x7fffffff, 0xffffffff], 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x9, 0x5, 0x0, 0xfffffff8, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000540), &(0x7f0000000940)="eddf88897476d4c03e1bb9925ed39b6ec6f77fa78ec253765be29f4149d73888742e78e85c693e04fe4b19cf587fa83db0b5e7875e2606e7dbe452ff214b11ba1829ddf508f54c3ececeb13f143728dc80f706314986a9d99a1dc54c66e63196ea3a8496fd3aefed670bdd8c9b703624a7b33957710ca420334086e574d6675a67726ead2553e8e222370b5ea8ce9eaa3e43462008e1d2398a8b3e6635e5600a", 0xa0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r4, r3, r3}, &(0x7f0000000580)=""/204, 0xcc, &(0x7f0000000680)={&(0x7f00000004c0)={'sha3-384\x00'}, &(0x7f0000000780)="c5e0", 0x2}) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000180)={0x7, 0x5, 0x355, 0x0, 0xe}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) ptrace$getregs(0xc, r2, 0x5e7, &(0x7f00000007c0)=""/179) socket(0x11, 0x800000002, 0x0) 2m9.167986756s ago: executing program 0 (id=61): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x900) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000200)={0x87, 0x14, 0x40000}, 0xfffffd35) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}}, 0x44000) 2m8.933671253s ago: executing program 4 (id=63): io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x6, 0xe, 0x1fd, 0xffffffffffff7f2d, 0x400}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) userfaultfd(0x801) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xfffffffb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2m8.932272548s ago: executing program 0 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x9}, 0x10}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x812, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c01020040000102"], 0x28}, 0xc0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240)=r4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x10e, 0x0, &(0x7f0000000380)="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", 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0xba7, &(0x7f0000000280)={0x0, 0x9f46, 0x80, 0x3, 0x3d3}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{0x8, 0x4}], {0x10, 0x1}}, 0x2c, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m8.470833085s ago: executing program 4 (id=66): syz_usb_connect(0x3, 0x2d, &(0x7f0000002680)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0x20, 0x134c, 0x1c16, 0xf053, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x5, 0x7, 0x20, 0x9, "", [{{0x9, 0x4, 0x4, 0x0, 0x0, 0x71, 0xce, 0xef, 0x5}}, {{0x9, 0x4, 0x4, 0x11, 0x0, 0xfd, 0xe5, 0x2d, 0xff}}]}}]}}, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x37c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7e47}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd37f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfc0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe881}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x16}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x651}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m7.998106369s ago: executing program 32 (id=66): syz_usb_connect(0x3, 0x2d, &(0x7f0000002680)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0x20, 0x134c, 0x1c16, 0xf053, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x5, 0x7, 0x20, 0x9, "", [{{0x9, 0x4, 0x4, 0x0, 0x0, 0x71, 0xce, 0xef, 0x5}}, {{0x9, 0x4, 0x4, 0x11, 0x0, 0xfd, 0xe5, 0x2d, 0xff}}]}}]}}, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x37c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7e47}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd37f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfc0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe881}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x16}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x651}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m7.761963656s ago: executing program 0 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x400) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000000040)={0x16, ""/22}) ioctl$EVIOCGMASK(r5, 0x80045b09, 0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x4, @remote, 0x81, 0x2}, 0x20) (async) ioctl(r7, 0xc4c85513, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.956852247s ago: executing program 0 (id=70): ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) close(0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0x560c89bb) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x20) sendmsg$sock(r6, &(0x7f0000000800)={&(0x7f0000000140)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)="4a30b0cd0050012181dc4c829bf5c32d3d626341282c074876f8b51b021b4cc2246ced520dcce035ffc739bba8ccb462c514f815183fab3b72751f966674a60de8d8bea7f4fceea62b6dd664ed4402f26baca4b13ed8c011669f031edf7ccfce8658838d8febeb19190f16e91f1d5be79c26c65957bde1ed644a", 0x7a}, {&(0x7f0000000300)="a38f79490a52923f359ebc4965ed1d03f8d9a7fefbd0139e617e602a94d31a198ef323db14daa3360ee6308488c10e6be40e58ee51938b5fa5b252e8d8e798a1285ce03f1cb406587bd291bd16cbac4d949773", 0x53}, {&(0x7f0000000380)="fe60d31107879a220ed3b70ab8521c8611d1d418ac3916bf184d13d84ea1ebfca58750f928b7b6d0fd89caca3939b09045cbd75d6e6f8a11512c102a35452f0cb139a50629f4ef5f34091c6a96546dd7d0c732e20524d36ebbbbc061962a02397a26a539c9da9283", 0x68}, {&(0x7f0000000480)="f7cd7ba8117b8cb7569e52475612ff1b70089aa386a1626ebed2f130176a4050d20bda3dd222e540cab0775bfc1ec00c9cdde500b255edcdeabdb6b5aa03c35043b00435f965bb0b4875110e884ad030098b78e13fdbe6fd4d3dd2df791e73c470e8ca4826565f01e8bd0f6e84c7fb5ae21e0663b48584badcdbc7a713380ace4ce320cc80e2996a99ce5b83994033b45fbd4037ebac34b3a0e654b070e2578940586452734c095832eb6a3fe257e87e6711", 0xb2}, {&(0x7f0000000540)="86ed30846518b6f8c2446b8c205b184dbd42a801e74dff82822dc72e6c460124591dd72a41e22c1ffb59027fc9dc86a27a369783bcd48d881669d61ee795bff944e8bb211399a9325383383a496c4a", 0x4f}, {&(0x7f00000005c0)="95d648500c336ab85219142396ce776a67841b8a5ff5e2178095ba394a7087f2648f40ae3eb2b25f037e0f6e3e7ffb4eed8941a92d76ff390dcec149d353c022ce02ea85ef7053d078b208c4fc4a12a46646baea30a5eebe763ef264368834d8d5a378aaa844676275b6dc946ff9642e1f134e5d128d6443cb28697789f144706fd4f6ebdd91335566b6e80ae625d7a07b58fd19ac29ece3", 0x98}, {&(0x7f0000000680)="c892c92be2d370e94c41cd74da30303f54346511ad88b85c7f3d59fce6dca2432599a18695d36009eedac463a653c37b71eea3ad62f5faeac0349824ab89a86e89fb077dd4f069e857add86d90f176de114584034d489f0a56f79b5cce748f70031bd0ca1900675a2a59c180675b86db3569f0b50291bd8eff210abc34838c52c4b3db994ec8d5f3a59cb021f341b6dbe946fcaa2df98d842f0d72bcceca9ad27c460f472d31f3ad", 0xa8}], 0x7, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xf9e}}], 0x30}, 0x8000) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) 2m6.772819581s ago: executing program 0 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="7a12dee7", 0x4}], 0x1}}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x5}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r8, 0x11, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r9, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100001"], 0x1c}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905060220000200020905", @ANYRES16], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2m6.133919135s ago: executing program 33 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="7a12dee7", 0x4}], 0x1}}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x5}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r8, 0x11, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r9, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100001"], 0x1c}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905060220000200020905", @ANYRES16], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 1m27.661899463s ago: executing program 6 (id=226): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) sendmmsg(r1, &(0x7f0000001d40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xad2, @mcast2, 0x4}, 0x80, 0x0}}], 0x1, 0x24040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000109021b00010000050000002b942ed4702f88d40553ca9e6eb18d56f10d5b12a3803e8300"/53, @ANYBLOB="91810c0fec05e0bf6b6b26e09d2e1a4cebf3c254c9ced3c314bb37463d5f9bdf7c54b7c8a1d6fbb7e3c59b79dc90d30f76c10c7e06a027e60c374b5ed18febf056c611d058793c93bac63c839669a855b9e0d3b7f9fc94"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/18) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) sendmmsg(r1, &(0x7f0000001d40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xad2, @mcast2, 0x4}, 0x80, 0x0}}], 0x1, 0x24040000) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000109021b00010000050000002b942ed4702f88d40553ca9e6eb18d56f10d5b12a3803e8300"/53, @ANYBLOB="91810c0fec05e0bf6b6b26e09d2e1a4cebf3c254c9ced3c314bb37463d5f9bdf7c54b7c8a1d6fbb7e3c59b79dc90d30f76c10c7e06a027e60c374b5ed18febf056c611d058793c93bac63c839669a855b9e0d3b7f9fc94"], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/18) (async) 1m24.592785766s ago: executing program 1 (id=239): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000840)=ANY=[]) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r3 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1m24.502304996s ago: executing program 6 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1m24.376826597s ago: executing program 6 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e0300040200010905000000000000000905feff"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1m21.448332451s ago: executing program 1 (id=250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_ublk_setup_io_uring(0x60ea, &(0x7f00000004c0)={0x0, 0xc985, 0x8, 0x40000002, 0x158}, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) unshare(0x26020480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) (async) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="89000000120081ae08061cdc030ec080002e22698001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703010093b837dc6cc01e32efaec8c7a60f9858ea64cad1552450659ba7f685ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f213", 0x74}], 0x1}, 0x24000015) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) (async) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r3 = syz_open_pts(r2, 0x8182) r4 = dup3(r3, r2, 0x0) write$P9_RCREATE(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000d3b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000b02000/0x3000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000bcd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x13357, &(0x7f0000000380)={0x0, 0x18af, 0x20000, 0x2, 0xce}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xffffbfffffffffff, 0x0, 0x2, 0x5}}, 0x20) io_uring_enter(r5, 0x2219, 0xcf74, 0x52, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x4b) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x4b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0xffffffffffffff2d, 0x2c}, 0x24000845) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0xffffffffffffff2d, 0x2c}, 0x24000845) openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m21.194293525s ago: executing program 6 (id=251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x10, {[@global=@item_012={0x2, 0x1, 0x8, "9903"}, @local=@item_4={0x3, 0x2, 0x9, "ea1ab933"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000040)={0x2, 0x200, 0x0, 0x1, 0xfffffffd, 0x3e}) 1m20.694550735s ago: executing program 5 (id=255): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @initdev}, &(0x7f0000000180)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b00a300000000000000b6000000400000000000", @ANYRES32=r2, @ANYBLOB="f500"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="050000000400"/28], 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) getxattr(0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0xfffe}) recvmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0, 0xfffffffffffffe87}, 0x40010323) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r5, 0xffffffffffffffff, 0x0) 1m18.932707437s ago: executing program 5 (id=256): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = dup(r3) write$binfmt_elf64(r5, 0x0, 0x78) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_MASTER={0x8, 0x9, 0x1}]}, 0x30}}, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6}) capset(0x0, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000, 0x0, 0x0, 0x400000}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x800) syz_usb_control_io$hid(r0, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x341, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x3d, 0x0, [{0xa7c, 0x3, 0x88, 0x468}, {0x6, 0xc, 0x2, 0x7}, {0x5, 0x5d, 0x34, 0x9}, {0x7, 0x85, 0x1b, 0x9}, {0x9, 0x0, 0xf, 0x6}, {0x5, 0x2, 0xc8, 0x1}, {0x8, 0x2, 0x9, 0x4ea}, {0x400, 0x0, 0x4, 0xf}, {0x81, 0x3, 0x14, 0x9}, {0x2, 0x3, 0x6, 0x36de}, {0x0, 0x0, 0x0, 0x6}, {0x638d, 0x8, 0x2c, 0x91}, {0x2, 0x2, 0x7, 0xfff}, {0xce1, 0x11, 0x9, 0x5}, {0x7, 0x8, 0x1, 0x4}, {0x6, 0x5, 0x5, 0x400}, {0x8, 0x50, 0x52, 0x2}, {0x9, 0x2, 0x5, 0x1}, {0x8, 0x2, 0x8, 0x8}, {0x0, 0x2, 0x3, 0xa95}, {0x5e2, 0x38, 0xfd, 0xfffff643}, {0x7, 0xf2, 0x5, 0x7ff}, {0xfff9, 0xe, 0x6, 0x4}, {0x8, 0x0, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xf8}, {0x7fff, 0xf8, 0x2, 0xfffffffa}, {0x3, 0x6, 0x5, 0x10}, {0x0, 0x9, 0x5, 0xffff9a1b}, {0xf4a, 0x1, 0x5, 0x5}, {0xfff3, 0x9, 0xb, 0x3}, {0x10, 0xb7, 0xa, 0xb4}, {0x5e, 0x4, 0xff, 0x400000}, {0x2, 0x7d, 0xb1, 0xde}, {0x9, 0xf, 0xb, 0x7}, {0xfffd, 0x4, 0x90, 0x8}, {0x0, 0x0, 0x3, 0x9}, {0x7, 0x9, 0x2, 0x7}, {0x5, 0xd, 0xb8, 0xcd}, {0xc9f, 0x33, 0x6, 0x9}, {0xfbc, 0x6, 0x91, 0x1}, {0x1, 0xed, 0x8, 0x2}, {0xffff, 0x1, 0x0, 0x200}, {0x5, 0xe, 0x2, 0xd}, {0x7ce, 0x2, 0xd4, 0x6}, {0x5, 0x7a, 0x10, 0x9}, {0x2, 0x7, 0x1, 0x80002}, {0x0, 0xfe, 0x9}, {0x8a4, 0xd0, 0x6d, 0x7}, {0x200, 0x8, 0x8, 0x7}, {0x1, 0x3, 0x5, 0x6}, {0xe290, 0xb1, 0xff, 0xd7b7}, {0x2, 0x81, 0x5}, {0x8, 0x0, 0x2f, 0xcb}, {0x29, 0x9f, 0xe0, 0xffff7270}, {0x8000, 0x4, 0x9, 0x6}, {0xbc00, 0x9, 0x6, 0x8}, {0x8, 0x8, 0x74, 0x80}, {0x1f2, 0x8, 0x2, 0xfffffffe}, {0x6, 0x7, 0x0, 0x3}, {0x3, 0x2, 0x7, 0x6}, {0x3, 0x1, 0x3, 0x8}, {0x7, 0x69, 0x3, 0xd46b}, {0x1000, 0xf, 0x3, 0xaac8}, {0x4, 0xbd, 0x5, 0x2}], {0x5f63}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x3}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m18.505439597s ago: executing program 2 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x149800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b000100000000090400"], 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2a, &(0x7f00000019c0)=0x5, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x35, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40f7761f, 0x0, 0x0, 0x0, 0x566}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @exit, @generic={0xff, 0x8, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xfffffffa, 0xd4, &(0x7f0000000600)=""/212, 0x41100, 0x4e, '\x00', r3, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x8, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x7, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r5], 0x20) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5e}, 0x1c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r11, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]}) 1m18.278537978s ago: executing program 1 (id=260): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000001600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000001540)={0x0, 0x1, 0x800, 0xfffffffc, 0x255}, &(0x7f00000012c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x2, 0x0, 0x1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4b7, 0x0, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x200, 0x2, 0x16c}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0xe0f, 0x0, 0x0}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0205710, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x300, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f87455da7fce92f7"}}, 0x38}, 0x300}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006d80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000000000000290000"], 0x18}}], 0x1, 0x0) 1m18.195625551s ago: executing program 3 (id=261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, 0x0) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x10000) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000300)=0x6) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x2e1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000340)) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x3) fspick(r5, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r13, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x496}) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0xffffffff, 0x4, 0x1, 0x5}}]}) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 1m18.029425078s ago: executing program 6 (id=262): syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r3, 0x0, 0x40000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) (async) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d39bce7d"}, 0x0, 0x2, {0x0}}) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r11, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r11, 0x5b) read$watch_queue(r10, &(0x7f0000000000)=""/1, 0x1) (async) keyctl$revoke(0x3, r9) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) 1m17.306571775s ago: executing program 3 (id=263): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000006000000000000000000ad0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) close_range(r2, r1, 0x2) madvise(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x41000ffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0x7dc, 0x38414761, 0xf, 0x1ff, 0xffffffff, 0x8, 0x1, 0x0, 0x3, 0x2}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) 1m17.222387099s ago: executing program 5 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000001, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b0, 0x0, 0x402}]}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x5, 0xff, 0x4, 0x9, 0x3ff, 0x5}, {0x5, 0x3, 0x3, 0x3, 0xb, 0x1}], ['\x00', '\x00', '\x00']}) 1m17.101863717s ago: executing program 1 (id=265): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_clone(0x8800, &(0x7f0000000000)="03f95fc235d6be6f7b2d62bc", 0xc, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5d53ca199a65eede360a9c25a139862da544d45ac4e37a28097ffe56027fb3cf6a4de66a0378d3782e59824ca05bff796d7fdf655d209cabe7f7c7d1b84997cc62930ca76a855f1388e097a0ce752ea8c9053ae6aff250ecd51159f3b34469f786c2f83a91f5655f3d7a4e03d05b03b756bae84110349163212fa73efc3de968805976c4b9b66fcd6a380c79aa6d4d3e2642b94fded47e0d27e8560ff29db2a3be5ae2c0d1bb83fab9e8") write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @private0, 0x6}, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x9}, 0xffffffffffffffff, 0x2}}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 1m16.94126756s ago: executing program 1 (id=266): r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040532b310040000102130109026e00030108c010080b0004012230070904010000010130000a2401100a000700000009040100000102300009040101010102300009050109200040d4040a252500000000010600090402000001023000090402010101023000090582091002f82a020a252500040000050608"], 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="2de8e0c62306e84b9029dcfa0c4450000d39d3", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r9, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000040000"], 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}}, 0x884) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00030900000000000020"], 0x0, 0x0, 0x0}, 0x0) 1m16.918689061s ago: executing program 2 (id=267): unshare(0x2c020400) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0x7fffffffffffffff}}, 0x28) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x6b, 0xd9, 0x36, 0x40, 0x424, 0x9e00, 0x9120, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xf, 0x91, 0x0, 0x43, "", [{{0x9, 0x4, 0xd8, 0x3, 0x2, 0xff, 0x2, 0x62, 0x2, [], [{{0x9, 0x5, 0xc, 0x3, 0x8, 0x6, 0x7, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x1, 0x7}}]}}]}}]}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m16.697920132s ago: executing program 5 (id=268): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) syz_usb_connect(0x0, 0x59, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000480)) 1m15.87024764s ago: executing program 3 (id=269): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x6) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) 1m15.587505053s ago: executing program 3 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xcc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b00"], 0x30}}, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 1m15.460813872s ago: executing program 3 (id=271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000500)=[@sack_perm, @sack_perm, @mss, @sack_perm], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) (async) bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x56002329, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4200005}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x56002329, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4200005}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04", 0x1}], 0x1}}], 0x1, 0x4000001) r2 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$evdev(0x0, 0x7f, 0x842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ddd000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m15.36119988s ago: executing program 5 (id=272): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r8 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2bb, 0x20000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x826, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)}) ioctl$sock_inet_SIOCADDRT(r14, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @private=0xa010101}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0xfffffffffffffffa, 0x2}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$midi(0x4, 0x38, &(0x7f0000001200)=ANY=[@ANYBLOB="120150020000004030144b474000010203010902260001010490bf090433770101033001072401cf0a8b40cd011a91080044000304250100"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1m15.028487013s ago: executing program 1 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r1 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x24, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) mprotect(&(0x7f00003d2000/0x4000)=nil, 0x4000, 0x1) r3 = syz_usb_connect(0x0, 0xb38, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x8d, 0x60, 0x8e, 0x10, 0x20f4, 0xe05a, 0x594c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb26, 0x3, 0x5, 0x9, 0xc0, 0xee, "", [{{0x9, 0x4, 0xb5, 0x2, 0x8, 0x2, 0x6, 0x0, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x1f}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0x1, 0x10, "0037fcda3653"}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0xffff, 0x48, '$'}]}, @uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf7, 0x3, 0x5, 0x9, 'Xs*,7%'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x47, 0x1, 0x7, 0x3, "97e7", "3c9a"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x2}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x6, 0xf5, 0x67, [@generic={0x3, 0x7, "e3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x0, 0x0, 0x5, [@generic={0x3a, 0x5, "11040a8e8410c195eeeb971c4c6652592c5e76732eae4c227fdc1bd14d6e42f96526f21a87657e57610db130166e7d74e778488e45b956f7"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x6, 0x4e, 0x8, [@generic={0xd9, 0x21, "408321f76ffd939b501e7163c6995c53ccf346d51bb3fb3319b6e818789dea2927a4d7b7f33e960a0caf02943c1762b9b4c21e763308bf8422e492d030a4d9b3d7374958e89ab0bfe251311b21010a612421ecb355fc828a60e3a9dca16727d6d235ced14197abe729c8c285a0d7a025a7890d101e39a780ee2b837e0336dede6a0556576badde15446c5e40873f22e589fdabbaf261400a774ae00f0f03002ad07aba7daec543a18e8ddab183b724b7846b09f8b90a4b2a03648480ac5eada97103d92c2b9f1757a079909b067a7e9a5ab0ad13a73811"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x88, 0x6, 0x7f, [@generic={0xca, 0x22, "a09d0c20620700996043dc8fe5de758fc050ea68ef818dc34dfb5b8525bda11cdd4cca0739a20e2681fb6a16911f6c98e928515b1865d2008826acbc2a7a07cf17f731ef627252360ae4d0ac222342abdb95815ad2f0c18087911c4cb4b437f108adb5eda745268029b9af7beb9ea9458c35f52a2e0c0d4aaf6a19efd395db446c1d6d37af5aa8f730318a77a44f369db4272f619d3e7f493b1bb04c1341197882028ccfb0399374632ce745f196710586715ffdc13a47d096e0a0ad8466a6199f3257199c2be202"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x1, 0x19, 0x1, [@generic={0xf8, 0x11, "0280a83928ff1a8f35aa3669e84d938fa79f7d8387b4da2d38ddbd47473eefa6dc2907ef664cc17d73c80e90fe0fc1f947dd2f92e4cd1673a84ab37ab3e7336fd2334bc93feeb2ea9c6c3a5262de1bfa245bacd1d206879e10b610dd57057c21978729c628b41a62fb2307ff5e24679ed1881c19a35242ee551cd8af8db07b4e9444d5a0fcc2c3f922b343709893633c946fb3d9cde1224aa355bc191c830fac3dfe21e08cade262677c52151d48d5f30f518b5e79b985d830091d6de168354324d9a7247982063615fec310902192fe98db58a62ece02d1f3b8c0a86333243d463f47bc642abb658a82eef8e826f3289539bbefe381"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xc}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0x5, 0x2, [@generic={0x7c, 0x6, "ccc8ea4e54859a0ac893776095ca69872099153c77e137e040f7744f845bf3209a604e83f1f22728a8a54980928b324d9bcf86b860efc64ea7f5b0e04a966860e167c659c135934a2930b4b4c23fff97e43d9af75f2173840924df053c50775dd54b51972be00fdcda9ed1ea7a1e1e5901b700fc25bdc00ff233"}, @generic={0x4d, 0x10, "8adec4342f1143fe00196c4c4cff38418b80cfa5d2e631697a0660c1266a21969f264cd18f95cbbea9865fcfae3efb2fcad88bced182d53adb4c815dd2af7cf80e69aa64ac7e6bbed2b396"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x9, 0x59, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xa0ef}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x10, 0x80, 0x8, [@generic={0x92, 0xb, "59ca7bdc0aacd339d002c5a03c03f39c7b0650039a2c5028c2357e2bc9f41a9b2f5e2e58de734e038122e9be08deb09fd00da383c824f996eaad287dd1cffea6a536e1d48fb458521f98874fefca2a4409ba23ca77aa4fcb8c896d56b57080371db22457d18e921579d1c5d9e2a8597ec0b72266eefb58c55e61fc3d734baa23a0df5c09ebbe75387458cf223871b41a"}]}}]}}, {{0x9, 0x4, 0xe2, 0x56, 0xc, 0xff, 0xff, 0xff, 0x74, [@generic={0x78, 0x1, "328ba54c67cb44382c4d203a2fe8d12bae722a6de2681ce2d512fa31a030c0b24eacd8f220a37a517c47e600be1788d32e861d196cc4beba1ce6ffe036365cda196ce8862931a21967411eecf3d33db0b007e8157f5a2cf54639c824a44ff013939cd21dc7079b222a85c14d20683f8b022761ac7d54"}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x7, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x81, 0xf7, 0xc, [@generic={0xfd, 0x3, "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"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x208, 0x3, 0x8a, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x2, 0x5, [@generic={0x78, 0xb, "3be0d0577cf0a3e59928a501d2260caa4c96fbe5d12a87c3a4203b93637ab47f2d213e46373c90d5c7f009e810b328e36e58a5e78fddab8a7a78d5bfb4f6186378743d5e2e0fdc5bf875239d792de74c137b7b2ef0ca4ccb1178700b3828841481540470edf07d23b715032c4d36a4b9c79b259183c4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x9, 0x3, [@generic={0x33, 0x1, "f7a89c3551c0c657c41c80ffc654910a2e86a0ad77997138d4413d60e50362399db731e99c7227580ab5c179aaba873a94"}, @generic={0xbc, 0x1, "793011ba146980dc5b7994764dfcd46db8cd62793d282489564f820c944f506edd66a6f12610bedee7d08f58ea6529f235c40ad083e123286ec039357d7cbe7b94b437ca8fa1781df8bc64e20c010eca428b15785499c49f3c3a40d52aaa7a20b43d35b9458467b94ef9da61e451b2fb3e0074ad342ab0c4a4d1c279776d7bd6cee1f5d53bb64609c386fc9f858399213f0d8e307d3e169de46c6b37a51a7171e8a619b5a83300a3f2fde56f83d1399d17708263d817b9b8bbcf"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x9, 0x40, 0xd, [@generic={0x25, 0x78, "e6470b4c601ababb64083f6a7569280fe28f4e643b38cf4c9dd249f96e5c49473b7446"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x401}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0x2, 0x0, [@generic={0xc3, 0xc, "5db1afbf88b1701ebdd72d69af59484d1681f63f06be2b9b05fa34b0b3c4f4830f5e1c4f1ee1343b18b063f1f1631f48983e54a3980cb476ade8b6b69e3872c5de9cdf316887cec6922ee6b73af2605a0401bbbe1f00ceb2599a9f9327ed50f23908c894fbe6f523abb4a8f6bd57124183a23430908fb7894d53f20056bd946424052dd2a7283e033f47c0635a46d100db5158e9388f4cd40a3df10dac5ae18f45541b3476c9b3479285e356b29f862e472cfee37b1f045d498ad7c7dfb1561786"}, @generic={0x2b, 0x2, "f296a4ad0a0e923862b8a33edc6263157417c3dd42da7a16721fb253b04b6d8bdc1a5bbd28a4549355"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xc, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xd}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5b, 0x6}]}}, {{0x9, 0x5, 0xe79b80963357aed7, 0x0, 0x3ff, 0x0, 0x81, 0x8, [@generic={0x4b, 0x10, "a6f3a86a6b8c3cf2484706f2090725042421d3f62bf94bab2dc8b3ce47adc29c6086cdf28ac310177935c5546f3467467c26972762031490e847181ae64c85812f9d54d916779de8ff"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x3, 0xe5, 0x80, [@generic={0x35, 0x10, "4ce04cab42060dc58288107dd4cb0ef635a380211bdb55fb8b7dac0711a370afa1f3705513727858e0b1203de223c5a7f90888"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xc3, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x64, 0x6}]}}]}}, {{0x9, 0x4, 0x9f, 0xfd, 0x4, 0xfc, 0x5, 0x4e, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "c5edbb1c"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x78, 0x7ff, 0x7, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x6, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x79}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0x1, 0x2, 0x10, 0x8000, 0xaf}]}], [{{0x9, 0x5, 0x9d8599f96e8b72b2, 0x4, 0x40, 0x7, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x7eb8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xe, 0x1, 0x6, [@generic={0x2f, 0x3, "cdac14e273455effe494d201781b3206d0aa1eec7798f78a47650745bb23ca00c8e891d941574da874ca504e6b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xf6c5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x80, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0xd1}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xe4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfb, 0x1ff}, @generic={0x74, 0x1, "57df9e2dd391c538284a448622228165c39dc6679ecb25ee0c454acd2c840a764ec07f1011fa9ac237d934a8e2743a395e6bbc980781f0aaa16235a9f9d2e525b69d8d312e646c984532226ac9560720ff47c09dbe95081aab76dc2c0eb71b88c839845001c053b84a038739cf779c4bb028"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0xbe, 0x6, 0x3, 0x8, 0x10}, 0x19c, &(0x7f0000000f80)={0x5, 0xf, 0x19c, 0x6, [@generic={0xda, 0x10, 0x2, "3a88ab55c124874b3e7f2ecbe1e45db2914cd0ae9c5349698f43c08266ecd08fe0067d61c4793cd9273d24a581255a7e5c5819a286e0766b37886a4efa411d8f9776fbe51f15e56281c0fa7564c91b50967d61db200eb03255659791f97f2671e9bd8f39af4f183613df1b7a5ca2912f6635ca0119d158a127aa3317c6f3d1a9ff672118b63e4397d1d14d808b49ac6cfda7975cc76151cce58cf845e7bdbab2ecf9e1ef1df0c7b38cda4fc494854e52e227f49fc246119596b257a237b1ef91efd7443ea7517d8c6000e61474bd20a603d56ec18a2297"}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x8, 0x6, 0x5}, @generic={0x36, 0x10, 0x2, "be761a1106789398ef52ba340474ee7f6755500656226e396abe84dd2eaf75b75f2bad7ed67f477235e1273b4acaccf3164a04"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x2, 0x8b7b}, @generic={0x72, 0x10, 0x0, "f4cb2380e9611d78f6ef850858c458acb3fef2593728f98a92d62ccd379e2d79ccbad2a79a41caedf813d1a3b6f75a8069507fb0479b6ef99f7b358ffb539f387c46d89a85f89b75a2479732abcfb314a6134444f41631d49e8dc439cfbb1e9a445212780ed80c7175638cb83c89ae"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x8, 0x6}]}, 0x4, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x807}}, {0x90, &(0x7f0000001240)=@string={0x90, 0x3, "cd76a0f102e16605d10705f51058fb0fb8394a99e39f598274d2f467b63c86f5a0027d7592a2d940fce39aafa5727f08fb284fdff29cb77e3bfb99f973d048f417929ade7893bfd384951143749b89d09eafa76417cb0b2c93880b446f4a50cc6ec7e735386a8114b0fc1a0034f73b4f4c634cbd4b098592c9e68c63239605654614afc4c69d215ba12de7f07381"}}]}) syz_usb_control_io(r3, &(0x7f00000015c0)={0x2c, &(0x7f0000001380)={0x20, 0x3, 0x53, {0x53, 0xe, "9a6054a4e1b521f877bc3c63a14831f20423b7415c0208793da43dc41b871b912dc67389e8f2317a60cc6e1b9f0872a63f65a689952ad65a94d36757b82b7e83371204d141be335fd47a4e679a1563aab2"}}, &(0x7f0000001400)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "a02bec50997aa480639ad3f1fe56cd8593df45d4ec815e0b1b718d82629f940a68a7be587337e532f254b9d04a2bbd89439a96bae73d29a22c254eb326d916af16a114fb68169b37ae568de0d895aa1639d1fa52315851e18a27be527f3f6366362e1eee0e263b2d3e01473ee214ac9f4fd535396c2acfb4b89dc3a12bf3cc34a4104051467a1da53f5c439d1c69cdd70f0f2cbd4b253a1f02de608c629d518892d441bd79a0429eaaf8cfd5e396be22d265fbfd50d30599caba3309a3eff2c4aaec1bf7a59d801a3f21780c7b"}}, &(0x7f0000001500)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x8, 0x4, "0867b0e5", "78e31b9e"}}, &(0x7f0000001580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0xe1, 0x7, 0x7, 0x2, 0x4, 0xc000}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x0, 0x31, 0x64, "8dcf807ffe45bfec4e446b24482240f5b70147eda24cce708d4b103e5cb4a88fa32bbe6a341be06e94b4a32252d1e4368c3c28b037f4e6aa9cb00b4a2af561ea929b7a6dc718d5f31157ceed6aa5e4ae29b9a2d1a3207edff8474ff448b44168521f94ab"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x10, 0x20}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000001800)={0x40, 0xb, 0x2, 'bQ'}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001900)={0x40, 0x19, 0x2, "b99b"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0xc7}, &(0x7f0000001a00)={0x40, 0x21, 0x1, 0x5}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$FIONREAD(r6, 0x541b, 0x0) read$FUSE(r6, &(0x7f0000001000)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000014000780080012400006000008000840000000370d000300686173683a6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x8800) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0xfffffb, 0x29c}, &(0x7f0000000040), &(0x7f0000000140), 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r9, 0x7c81, 0x0) lseek(0xffffffffffffffff, 0x81, 0x8100) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, r1}) r10 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) 1m14.880726965s ago: executing program 6 (id=274): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = dup(r3) write$binfmt_elf64(r5, 0x0, 0x78) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_MASTER={0x8, 0x9, 0x1}]}, 0x30}}, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6}) capset(0x0, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000, 0x0, 0x0, 0x400000}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x800) syz_usb_control_io$hid(r0, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x341, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x3d, 0x0, [{0xa7c, 0x3, 0x88, 0x468}, {0x6, 0xc, 0x2, 0x7}, {0x5, 0x5d, 0x34, 0x9}, {0x7, 0x85, 0x1b, 0x9}, {0x9, 0x0, 0xf, 0x6}, {0x5, 0x2, 0xc8, 0x1}, {0x8, 0x2, 0x9, 0x4ea}, {0x400, 0x0, 0x4, 0xf}, {0x81, 0x3, 0x14, 0x9}, {0x2, 0x3, 0x6, 0x36de}, {0x0, 0x0, 0x0, 0x6}, {0x638d, 0x8, 0x2c, 0x91}, {0x2, 0x2, 0x7, 0xfff}, {0xce1, 0x11, 0x9, 0x5}, {0x7, 0x8, 0x1, 0x4}, {0x6, 0x5, 0x5, 0x400}, {0x8, 0x50, 0x52, 0x2}, {0x9, 0x2, 0x5, 0x1}, {0x8, 0x2, 0x8, 0x8}, {0x0, 0x2, 0x3, 0xa95}, {0x5e2, 0x38, 0xfd, 0xfffff643}, {0x7, 0xf2, 0x5, 0x7ff}, {0xfff9, 0xe, 0x6, 0x4}, {0x8, 0x0, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xf8}, {0x7fff, 0xf8, 0x2, 0xfffffffa}, {0x3, 0x6, 0x5, 0x10}, {0x0, 0x9, 0x5, 0xffff9a1b}, {0xf4a, 0x1, 0x5, 0x5}, {0xfff3, 0x9, 0xb, 0x3}, {0x10, 0xb7, 0xa, 0xb4}, {0x5e, 0x4, 0xff, 0x400000}, {0x2, 0x7d, 0xb1, 0xde}, {0x9, 0xf, 0xb, 0x7}, {0xfffd, 0x4, 0x90, 0x8}, {0x0, 0x0, 0x3, 0x9}, {0x7, 0x9, 0x2, 0x7}, {0x5, 0xd, 0xb8, 0xcd}, {0xc9f, 0x33, 0x6, 0x9}, {0xfbc, 0x6, 0x91, 0x1}, {0x1, 0xed, 0x8, 0x2}, {0xffff, 0x1, 0x0, 0x200}, {0x5, 0xe, 0x2, 0xd}, {0x7ce, 0x2, 0xd4, 0x6}, {0x5, 0x7a, 0x10, 0x9}, {0x2, 0x7, 0x1, 0x80002}, {0x0, 0xfe, 0x9}, {0x8a4, 0xd0, 0x6d, 0x7}, {0x200, 0x8, 0x8, 0x7}, {0x1, 0x3, 0x5, 0x6}, {0xe290, 0xb1, 0xff, 0xd7b7}, {0x2, 0x81, 0x5}, {0x8, 0x0, 0x2f, 0xcb}, {0x29, 0x9f, 0xe0, 0xffff7270}, {0x8000, 0x4, 0x9, 0x6}, {0xbc00, 0x9, 0x6, 0x8}, {0x8, 0x8, 0x74, 0x80}, {0x1f2, 0x8, 0x2, 0xfffffffe}, {0x6, 0x7, 0x0, 0x3}, {0x3, 0x2, 0x7, 0x6}, {0x3, 0x1, 0x3, 0x8}, {0x7, 0x69, 0x3, 0xd46b}, {0x1000, 0xf, 0x3, 0xaac8}, {0x4, 0xbd, 0x5, 0x2}], {0x5f63}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x3}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m14.880211339s ago: executing program 3 (id=275): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) (async) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2, 0xf5, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x24044850) 1m13.970309673s ago: executing program 2 (id=279): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r4, &(0x7f0000000400)='PASV\r\n', 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x56, 0xa, 0x0, "3258ae1e10006c5d354000", 0x30313953}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) 1m13.829363471s ago: executing program 5 (id=280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010d422031500000000000109022400010000104014040010fe0300010009210100fc0122280009058103ff0303810b"], 0x0) (async, rerun: 32) r1 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0xb1e1, 0x2, 0x2000003, 0x22c}) (rerun: 32) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x5dba6000) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00;'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_connect$midi(0x5, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xff, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3b, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0xb6}, @ms_header={0x7, 0x24, 0x1, 0xfff, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0xe}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0xd, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0xc, 0x0, [], 0x7}], [{{0x9, 0x5, 0xd, 0x2, 0x0, 0x5, 0x9, 0x1, {0x7, 0x25, 0x1, 0x3, "5a6e87"}}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x9, 0xf5, 0x91, {0x4}}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x2, 0x0, 0xb0, {0x7, 0x25, 0x1, 0x3, "bd6d08"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xee, 0x81, 0x0, 0x20, 0x2}, 0x14, &(0x7f0000000200)={0x5, 0xf, 0x14, 0x2, [@generic={0x3, 0x10, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x5, 0x0, 0x401}]}}) 0s ago: executing program 34 (id=274): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = dup(r3) write$binfmt_elf64(r5, 0x0, 0x78) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_MASTER={0x8, 0x9, 0x1}]}, 0x30}}, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6}) capset(0x0, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000, 0x0, 0x0, 0x400000}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x800) syz_usb_control_io$hid(r0, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x341, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x3d, 0x0, [{0xa7c, 0x3, 0x88, 0x468}, {0x6, 0xc, 0x2, 0x7}, {0x5, 0x5d, 0x34, 0x9}, {0x7, 0x85, 0x1b, 0x9}, {0x9, 0x0, 0xf, 0x6}, {0x5, 0x2, 0xc8, 0x1}, {0x8, 0x2, 0x9, 0x4ea}, {0x400, 0x0, 0x4, 0xf}, {0x81, 0x3, 0x14, 0x9}, {0x2, 0x3, 0x6, 0x36de}, {0x0, 0x0, 0x0, 0x6}, {0x638d, 0x8, 0x2c, 0x91}, {0x2, 0x2, 0x7, 0xfff}, {0xce1, 0x11, 0x9, 0x5}, {0x7, 0x8, 0x1, 0x4}, {0x6, 0x5, 0x5, 0x400}, {0x8, 0x50, 0x52, 0x2}, {0x9, 0x2, 0x5, 0x1}, {0x8, 0x2, 0x8, 0x8}, {0x0, 0x2, 0x3, 0xa95}, {0x5e2, 0x38, 0xfd, 0xfffff643}, {0x7, 0xf2, 0x5, 0x7ff}, {0xfff9, 0xe, 0x6, 0x4}, {0x8, 0x0, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xf8}, {0x7fff, 0xf8, 0x2, 0xfffffffa}, {0x3, 0x6, 0x5, 0x10}, {0x0, 0x9, 0x5, 0xffff9a1b}, {0xf4a, 0x1, 0x5, 0x5}, {0xfff3, 0x9, 0xb, 0x3}, {0x10, 0xb7, 0xa, 0xb4}, {0x5e, 0x4, 0xff, 0x400000}, {0x2, 0x7d, 0xb1, 0xde}, {0x9, 0xf, 0xb, 0x7}, {0xfffd, 0x4, 0x90, 0x8}, {0x0, 0x0, 0x3, 0x9}, {0x7, 0x9, 0x2, 0x7}, {0x5, 0xd, 0xb8, 0xcd}, {0xc9f, 0x33, 0x6, 0x9}, {0xfbc, 0x6, 0x91, 0x1}, {0x1, 0xed, 0x8, 0x2}, {0xffff, 0x1, 0x0, 0x200}, {0x5, 0xe, 0x2, 0xd}, {0x7ce, 0x2, 0xd4, 0x6}, {0x5, 0x7a, 0x10, 0x9}, {0x2, 0x7, 0x1, 0x80002}, {0x0, 0xfe, 0x9}, {0x8a4, 0xd0, 0x6d, 0x7}, {0x200, 0x8, 0x8, 0x7}, {0x1, 0x3, 0x5, 0x6}, {0xe290, 0xb1, 0xff, 0xd7b7}, {0x2, 0x81, 0x5}, {0x8, 0x0, 0x2f, 0xcb}, {0x29, 0x9f, 0xe0, 0xffff7270}, {0x8000, 0x4, 0x9, 0x6}, {0xbc00, 0x9, 0x6, 0x8}, {0x8, 0x8, 0x74, 0x80}, {0x1f2, 0x8, 0x2, 0xfffffffe}, {0x6, 0x7, 0x0, 0x3}, {0x3, 0x2, 0x7, 0x6}, {0x3, 0x1, 0x3, 0x8}, {0x7, 0x69, 0x3, 0xd46b}, {0x1000, 0xf, 0x3, 0xaac8}, {0x4, 0xbd, 0x5, 0x2}], {0x5f63}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x3}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): syz [ 91.879116][ T5685] usb 5-1: SerialNumber: syz [ 91.882279][ T5685] usb 5-1: config 0 descriptor?? [ 91.934523][ T5717] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 91.935458][ T5717] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 91.935491][ T5717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.935507][ T5717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.935524][ T5717] usb 1-1: config 0 has no interface number 0 [ 91.935640][ T5717] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.935659][ T5717] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.937577][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.937600][ T5717] usb 1-1: Product: syz [ 91.937612][ T5717] usb 1-1: Manufacturer: syz [ 91.937624][ T5717] usb 1-1: SerialNumber: syz [ 91.941726][ T5717] usb 1-1: config 0 descriptor?? [ 92.259917][ T5717] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected [ 92.271883][ T5717] cyphidcom ttyUSB0: required endpoint is missing [ 92.285344][ T5717] usb 1-1: USB disconnect, device number 8 [ 92.290468][ T5717] cypress_m8 1-1:0.74: device disconnected [ 92.328270][ T5685] usb 5-1: Firmware: major: 0, minor: 65, hardware type: UNKNOWN (255) [ 92.502702][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 92.559212][ T5685] usb 5-1: failed to fetch extended address, random address set [ 92.559248][ T5685] usb 5-1: atusb_probe: initialization failed, error = -524 [ 92.559522][ T5685] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 92.570051][ T5685] usb 5-1: USB disconnect, device number 3 [ 93.046303][ T5914] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 93.264578][ T155] IPVS: starting estimator thread 0... [ 93.328038][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.53'. [ 93.328194][ T5924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.353803][ T5922] IPVS: using max 36 ests per chain, 86400 per kthread [ 93.713677][ T5685] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 93.869075][ T5685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.870560][ T5685] usb 3-1: not running at top speed; connect to a high speed hub [ 93.870595][ T5685] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 93.872538][ T5685] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 93.872563][ T5685] usb 3-1: config 160 has no interface number 0 [ 93.872590][ T5685] usb 3-1: config 160 interface 187 has no altsetting 0 [ 93.878487][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.878511][ T5685] usb 3-1: Product: syz [ 93.878523][ T5685] usb 3-1: Manufacturer: syz [ 93.878535][ T5685] usb 3-1: SerialNumber: syz [ 93.890317][ T5699] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 94.046809][ T5699] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.049475][ T5699] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 94.049508][ T5699] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 94.049521][ T5699] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 94.056380][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.056402][ T5699] usb 5-1: Product: syz [ 94.056414][ T5699] usb 5-1: Manufacturer: syz [ 94.056451][ T5699] usb 5-1: SerialNumber: syz [ 94.082856][ T5699] cdc_mbim 5-1:1.0: skipping garbage [ 94.298510][ T5933] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.298573][ T5933] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.398593][ T5685] pl2303 3-1:160.187: required endpoints missing [ 94.414419][ T5729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.415345][ T5685] usb 3-1: USB disconnect, device number 8 [ 94.576800][ T5729] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.579580][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.579609][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.579623][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.579654][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.648829][ T5729] usb 2-1: config 0 descriptor?? [ 95.018992][ T5933] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.019133][ T5933] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.022986][ T5699] cdc_mbim 5-1:1.0: dwNtbInMaxSize=11 is too small. Using 2048 [ 95.023013][ T5699] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 95.117163][ T5729] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 95.417614][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.434584][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.893478][ T5961] kvm: MONITOR instruction emulated as NOP! [ 95.974524][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 96.109044][ T5699] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 96.144264][ T5699] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 96.170148][ T5699] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 96.180417][ T5699] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 96.241453][ T5699] usb 5-1: USB disconnect, device number 4 [ 96.402829][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.473693][ T5717] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.558035][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.635414][ T5717] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 96.636639][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.636670][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.636704][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.639852][ T5717] usb 4-1: config 0 descriptor?? [ 96.746721][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.922381][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.111254][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.111703][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.165139][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.166278][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.167832][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.170277][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.171716][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.173295][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.173925][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.342284][ T1150] bridge_slave_1: left allmulticast mode [ 97.342316][ T1150] bridge_slave_1: left promiscuous mode [ 97.343878][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.365909][ T5729] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 97.379079][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 97.379193][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.381576][ T1150] bridge_slave_0: left allmulticast mode [ 97.381602][ T1150] bridge_slave_0: left promiscuous mode [ 97.381919][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.417972][ T5717] usb 4-1: USB disconnect, device number 4 [ 97.528565][ T5729] usb 2-1: device descriptor read/64, error -71 [ 97.579565][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.581827][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.582990][ T1150] bond0 (unregistering): Released all slaves [ 97.783713][ T5729] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 97.914690][ T5729] usb 2-1: device descriptor read/64, error -71 [ 98.131192][ T1150] hsr_slave_0: left promiscuous mode [ 98.144399][ T1150] hsr_slave_1: left promiscuous mode [ 98.149744][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.149779][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.154187][ T5729] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 98.159183][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.159207][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.201349][ T5729] usb 2-1: device descriptor read/8, error -71 [ 98.230874][ T1150] veth1_macvtap: left promiscuous mode [ 98.231009][ T1150] veth0_macvtap: left promiscuous mode [ 98.231126][ T1150] veth1_vlan: left promiscuous mode [ 98.231211][ T1150] veth0_vlan: left promiscuous mode [ 98.433717][ T5729] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 98.460627][ T5729] usb 2-1: device descriptor read/8, error -71 [ 98.569992][ T30] usb 2-1: USB disconnect, device number 4 [ 98.794856][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.923693][ T30] usb 2-1: device descriptor read/64, error -71 [ 98.932706][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.939217][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.943055][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.945334][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.949881][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.111492][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 99.147021][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 99.165598][ T30] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.243988][ T5623] Bluetooth: hci0: command tx timeout [ 99.275325][ T5729] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.298296][ T30] usb 2-1: device descriptor read/64, error -71 [ 99.350430][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 99.417360][ T30] usb usb2-port1: attempt power cycle [ 99.434990][ T5729] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 99.435958][ T5729] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.435983][ T5729] usb 4-1: config 1 has no interface number 0 [ 99.436021][ T5729] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 99.436050][ T5729] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 99.436084][ T5729] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 99.439317][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 99.439341][ T5729] usb 4-1: Product: syz [ 99.439355][ T5729] usb 4-1: Manufacturer: syz [ 99.439369][ T5729] usb 4-1: SerialNumber: syz [ 99.773703][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.804027][ T30] usb 2-1: device descriptor read/8, error -71 [ 99.820603][ T6022] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 99.992828][ T6022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.003299][ T5699] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.043875][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.149197][ T6015] bond1: (slave veth0_to_bond): making interface the new active one [ 100.164452][ T5699] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 100.165487][ T5699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.165534][ T5699] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 100.165557][ T5699] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 100.165593][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.168045][ T6015] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 100.240034][ T6028] bond1: entered promiscuous mode [ 100.240057][ T6028] veth0_to_bond: entered promiscuous mode [ 100.256596][ T6028] bond1: entered allmulticast mode [ 100.256619][ T6028] veth0_to_bond: entered allmulticast mode [ 100.273100][ T6029] macvlan5: entered promiscuous mode [ 100.273121][ T6029] macvlan5: entered allmulticast mode [ 100.290133][ T6029] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 100.306401][ T6029] bond1: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 100.455779][ T30] usb 2-1: device descriptor read/8, error -71 [ 100.563983][ T30] usb usb2-port1: unable to enumerate USB device [ 100.592815][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.592916][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.593067][ T5984] bridge_slave_0: entered allmulticast mode [ 100.604629][ T5984] bridge_slave_0: entered promiscuous mode [ 100.622431][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.622530][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.622689][ T5984] bridge_slave_1: entered allmulticast mode [ 100.632113][ T5984] bridge_slave_1: entered promiscuous mode [ 100.711317][ T5729] usb 4-1: USB disconnect, device number 5 [ 100.860461][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.867410][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.891738][ T6018] fuse: Bad value for 'fd' [ 100.909085][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.927486][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.996442][ T30] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 101.005300][ T5623] Bluetooth: hci3: command tx timeout [ 101.048569][ T5984] team0: Port device team_slave_0 added [ 101.064686][ T5984] team0: Port device team_slave_1 added [ 101.161485][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.161502][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.161523][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.172154][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.173531][ T30] usb 2-1: not running at top speed; connect to a high speed hub [ 101.173595][ T30] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 101.173747][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.173758][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.173778][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.176126][ T30] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 101.176163][ T30] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 4 [ 101.180493][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.180516][ T30] usb 2-1: Product: syz [ 101.180527][ T30] usb 2-1: Manufacturer: syz [ 101.180540][ T30] usb 2-1: SerialNumber: syz [ 101.326569][ T5623] Bluetooth: hci0: command tx timeout [ 101.368111][ T5984] hsr_slave_0: entered promiscuous mode [ 101.369316][ T5984] hsr_slave_1: entered promiscuous mode [ 101.424657][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.425218][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.456290][ T5699] cxacru 3-1:1.0: send of cm 0x84 failed (-71) [ 101.456347][ T5699] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 101.480709][ T5699] cxacru 3-1:1.0: send of cm 0x88 failed (-71) [ 101.480774][ T5699] ATM dev 0: poll status: error -71 [ 101.480828][ T5699] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 101.480842][ T5699] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a708600 submission failed (-8)! [ 101.481060][ T5699] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a708500 submission failed (-8)! [ 101.481079][ T5699] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a708400 submission failed (-8)! [ 101.481096][ T5699] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a708300 submission failed (-8)! [ 101.542820][ T30] usb 2-1: unit 0 not found! [ 101.552640][ T5699] usb 3-1: USB disconnect, device number 9 [ 101.584082][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a708300 submission failed (-19)! [ 101.636663][ T5729] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.693874][ T6058] netlink: NAT attribute has 8 unknown bytes [ 101.693908][ T6058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.699001][ T6059] netlink: NAT attribute has 8 unknown bytes [ 101.699034][ T6059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.764841][ T5729] usb 4-1: device descriptor read/64, error -71 [ 101.881523][ T30] usb 2-1: USB disconnect, device number 9 [ 102.005138][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.056287][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.134051][ T5729] usb 4-1: device descriptor read/64, error -71 [ 102.173731][ T5699] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 102.244955][ T5729] usb usb4-port1: attempt power cycle [ 102.282926][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.283791][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.284130][ T6014] bridge_slave_0: entered allmulticast mode [ 102.286763][ T6014] bridge_slave_0: entered promiscuous mode [ 102.333789][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 102.334485][ T5699] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 102.335486][ T5699] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 102.335512][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.335542][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.339467][ T5699] usb 3-1: config 0 descriptor?? [ 102.391877][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.392042][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.392428][ T6014] bridge_slave_1: entered allmulticast mode [ 102.395497][ T6014] bridge_slave_1: entered promiscuous mode [ 102.412519][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.449289][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.452728][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.513076][ T6014] team0: Port device team_slave_0 added [ 102.518625][ T6014] team0: Port device team_slave_1 added [ 102.562001][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.562017][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.562033][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.564587][ T30] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.614480][ T5729] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 102.642211][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.642237][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.642260][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.646817][ T5729] usb 4-1: device descriptor read/8, error -71 [ 102.724686][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 102.729184][ T30] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.734455][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 102.734483][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.741756][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.741782][ T30] usb 2-1: Product: syz [ 102.741795][ T30] usb 2-1: Manufacturer: syz [ 102.741807][ T30] usb 2-1: SerialNumber: syz [ 102.751278][ T30] usb 2-1: config 0 descriptor?? [ 102.763946][ T30] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.763981][ T30] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 102.856694][ T5699] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 102.884655][ T5729] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 102.885109][ T5984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.905464][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.910319][ T5984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.916358][ T5729] usb 4-1: device descriptor read/8, error -71 [ 102.936038][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.955676][ T6014] hsr_slave_0: entered promiscuous mode [ 102.961618][ T6014] hsr_slave_1: entered promiscuous mode [ 102.966948][ T6014] debugfs: 'hsr0' already exists in 'hsr' [ 102.966971][ T6014] Cannot create hsr debugfs directory [ 102.994854][ T5984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.024229][ T5729] usb usb4-port1: unable to enumerate USB device [ 103.031551][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.076780][ T5984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.082818][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.083829][ T5623] Bluetooth: hci3: command tx timeout [ 103.260229][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.264473][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.285581][ T5699] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -71 [ 103.290988][ T5699] usb 3-1: USB disconnect, device number 10 [ 103.403941][ T5623] Bluetooth: hci0: command tx timeout [ 103.558056][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 103.585770][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.597275][ T6014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.599121][ T30] em28xx 2-1:0.0: chip ID is em2874 [ 103.615012][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.617423][ T6014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.647514][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.668322][ T6014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.673423][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.677920][ T6014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.688660][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.692834][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.713019][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.713192][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.733810][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.733926][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.918396][ T5717] usb 2-1: USB disconnect, device number 10 [ 103.928848][ T5717] em28xx 2-1:0.0: Disconnecting em28xx [ 103.962741][ T6110] loop5: detected capacity change from 0 to 7 [ 103.981059][ T6110] Dev loop5: unable to read RDB block 7 [ 103.981105][ T6110] loop5: unable to read partition table [ 103.981289][ T6110] loop5: partition table beyond EOD, truncated [ 103.982939][ T6110] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 104.001574][ T5717] em28xx: Freeing device [ 104.071796][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.089409][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.147720][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.166706][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.166808][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.191812][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.191872][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.242302][ T5984] veth0_vlan: entered promiscuous mode [ 104.266204][ T5984] veth1_vlan: entered promiscuous mode [ 104.333090][ T5984] veth0_macvtap: entered promiscuous mode [ 104.341288][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.350496][ T5984] veth1_macvtap: entered promiscuous mode [ 104.365950][ T5685] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 104.405320][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.425125][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.454076][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.454387][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.535646][ T5685] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 104.541896][ T5685] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 104.541922][ T5685] usb 3-1: config 0 has no interface number 0 [ 104.541960][ T5685] usb 3-1: config 0 interface 41 has no altsetting 0 [ 104.575945][ T6014] veth0_vlan: entered promiscuous mode [ 104.587088][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.587114][ T5685] usb 3-1: Product: syz [ 104.587126][ T5685] usb 3-1: Manufacturer: syz [ 104.587139][ T5685] usb 3-1: SerialNumber: syz [ 104.621018][ T5685] usb 3-1: config 0 descriptor?? [ 104.646975][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.705101][ T6014] veth1_vlan: entered promiscuous mode [ 104.818748][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.818776][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.894440][ T5717] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 104.922424][ T6014] veth0_macvtap: entered promiscuous mode [ 104.937943][ T6014] veth1_macvtap: entered promiscuous mode [ 104.940369][ T2323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.940388][ T2323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.005543][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.026838][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.043035][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.065361][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 105.069461][ T5717] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 105.071509][ T5717] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 105.071530][ T5717] usb 2-1: config 179 has no interface number 0 [ 105.071569][ T5717] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 105.071591][ T5717] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 105.071613][ T5717] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.071634][ T5717] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 105.071655][ T5717] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 105.071692][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.091560][ T6119] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 105.176462][ T5623] Bluetooth: hci3: command tx timeout [ 105.328177][ T38] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.329306][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.354100][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.434745][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.440400][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.440419][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.486429][ T5623] Bluetooth: hci0: command tx timeout [ 105.502055][ T5685] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 105.502330][ T5717] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 105.583488][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.583511][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.947168][ T6134] syz_tun: entered allmulticast mode [ 106.280955][ T6140] xt_hashlimit: size too large, truncated to 1048576 [ 106.315338][ T5699] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 106.464491][ T5699] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.465664][ T5699] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.465720][ T5699] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.465756][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.521726][ T5699] hub 7-1:4.0: USB hub found [ 106.722490][ T5699] hub 7-1:4.0: 2 ports detected [ 106.722546][ T5699] usb 7-1: selecting invalid altsetting 1 [ 106.722560][ T5699] hub 7-1:4.0: Using single TT (err -22) [ 106.817270][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.823766][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.243974][ T5623] Bluetooth: hci3: command tx timeout [ 107.345285][ T6148] bridge_slave_0: left allmulticast mode [ 107.345312][ T6148] bridge_slave_0: left promiscuous mode [ 107.346760][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.425834][ T6148] bridge_slave_1: left allmulticast mode [ 107.425852][ T6148] bridge_slave_1: left promiscuous mode [ 107.437240][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.521801][ T6148] bond0: (slave bond_slave_0): Releasing backup interface [ 107.608972][ T6148] bond0: (slave bond_slave_1): Releasing backup interface [ 107.650219][ T5730] usb 2-1: USB disconnect, device number 11 [ 107.650293][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.650340][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.719929][ T6148] team0: Port device team_slave_0 removed [ 107.773030][ T6148] team0: Port device team_slave_1 removed [ 107.783046][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.783069][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.802774][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.802797][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.820411][ T5685] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 107.821301][ T5685] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 107.821537][ T5685] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 107.839872][ T6157] loop5: detected capacity change from 0 to 7 [ 107.849373][ T6148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.868497][ T6157] Dev loop5: unable to read RDB block 7 [ 107.868543][ T6157] loop5: unable to read partition table [ 107.876269][ T6157] loop5: partition table beyond EOD, truncated [ 107.876306][ T6157] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 107.919417][ T5685] usb 3-1: USB disconnect, device number 11 [ 107.985900][ T5730] usb 7-1: USB disconnect, device number 2 [ 108.030992][ T6155] x_tables: duplicate underflow at hook 2 [ 108.313652][ T5699] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 108.464997][ T5699] usb 2-1: device descriptor read/64, error -71 [ 108.615254][ T5730] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.703852][ T5699] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 108.780649][ T5730] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.797765][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.797792][ T5730] usb 6-1: Product: syz [ 108.797805][ T5730] usb 6-1: Manufacturer: syz [ 108.797817][ T5730] usb 6-1: SerialNumber: syz [ 108.835316][ T5699] usb 2-1: device descriptor read/64, error -71 [ 108.875506][ T5686] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 108.944314][ T5699] usb usb2-port1: attempt power cycle [ 108.959365][ T864] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 108.959502][ T5717] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 109.024801][ T5686] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 109.026032][ T5686] usb 3-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 109.026066][ T5686] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 243, using maximum allowed: 30 [ 109.026098][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 243 [ 109.026135][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.031307][ T5686] usb 3-1: config 0 descriptor?? [ 109.124411][ T864] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.128205][ T864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.128230][ T864] usb 7-1: Product: syz [ 109.128243][ T864] usb 7-1: Manufacturer: syz [ 109.128256][ T864] usb 7-1: SerialNumber: syz [ 109.144563][ T864] usb 7-1: config 0 descriptor?? [ 109.205017][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 109.215264][ T5717] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 109.217064][ T5717] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 109.217089][ T5717] usb 4-1: config 0 has no interface number 0 [ 109.217125][ T5717] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 109.217175][ T5717] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 109.219634][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.219658][ T5717] usb 4-1: Product: syz [ 109.219671][ T5717] usb 4-1: Manufacturer: syz [ 109.219683][ T5717] usb 4-1: SerialNumber: syz [ 109.249359][ T5717] usb 4-1: config 0 descriptor?? [ 109.250252][ T6176] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 109.250395][ T6176] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 109.254921][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 109.256445][ T5686] usb 3-1: string descriptor 0 read error: -71 [ 109.262329][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 109.262390][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 109.265590][ T5686] usb 3-1: USB disconnect, device number 12 [ 109.284037][ T5699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 109.308292][ T5699] usb 2-1: device descriptor read/8, error -71 [ 109.418486][ T864] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.483150][ T6176] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 109.483259][ T6176] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 109.544588][ T5699] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 109.569308][ T5699] usb 2-1: device descriptor read/8, error -71 [ 109.674485][ T5699] usb usb2-port1: unable to enumerate USB device [ 109.694765][ T5717] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 109.846703][ T864] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 109.851211][ T864] usb 7-1: USB disconnect, device number 3 [ 109.989722][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.990222][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.002171][ T6185] bridge0: entered allmulticast mode [ 110.930716][ T6195] bridge0: entered allmulticast mode [ 111.263272][ T6204] loop5: detected capacity change from 0 to 7 [ 111.272883][ T6204] Dev loop5: unable to read RDB block 7 [ 111.272928][ T6204] loop5: unable to read partition table [ 111.273210][ T6204] loop5: partition table beyond EOD, truncated [ 111.273249][ T6204] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 111.330945][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 111.331485][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 111.332129][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 111.332211][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.385290][ T5730] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 111.419363][ T5730] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 111.466248][ T5730] usb 6-1: USB disconnect, device number 2 [ 111.514127][ T5685] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 111.602901][ T6206] kvm [6205]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 111.675651][ T5685] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.676699][ T5685] usb 2-1: config index 0 descriptor too short (expected 8251, got 59) [ 111.676723][ T5685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.676761][ T5685] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.677762][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.677784][ T5685] usb 2-1: SerialNumber: syz [ 111.699341][ T5685] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 112.141656][ T5730] usb 2-1: USB disconnect, device number 16 [ 112.208227][ T6219] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 112.411883][ T5717] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 112.411903][ T5717] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 112.412107][ T5717] asix 4-1:0.34: probe with driver asix failed with error -71 [ 112.451646][ T5717] usb 4-1: USB disconnect, device number 10 [ 112.845905][ T6226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.336189][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 113.607877][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.610028][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.659071][ T6256] bridge0: entered allmulticast mode [ 114.143947][ T864] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.151631][ T6254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.317513][ T864] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 114.322356][ T864] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.322381][ T864] usb 3-1: config 1 has no interface number 0 [ 114.322405][ T864] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 114.322421][ T864] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 114.322440][ T864] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 114.362776][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 114.362793][ T864] usb 3-1: Product: syz [ 114.362800][ T864] usb 3-1: Manufacturer: syz [ 114.362807][ T864] usb 3-1: SerialNumber: syz [ 114.745043][ T6259] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 115.016523][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.077898][ T6265] bond1: (slave veth0_to_bond): making interface the new active one [ 115.081177][ T6265] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 115.121176][ T6267] bond1: entered promiscuous mode [ 115.121200][ T6267] veth0_to_bond: entered promiscuous mode [ 115.121392][ T6267] bond1: entered allmulticast mode [ 115.121405][ T6267] veth0_to_bond: entered allmulticast mode [ 115.191103][ T6259] macvlan2: entered promiscuous mode [ 115.191127][ T6259] macvlan2: entered allmulticast mode [ 115.197978][ T6259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.217193][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 115.225040][ T6259] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 115.353895][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.598509][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 115.660805][ T864] usb 3-1: USB disconnect, device number 13 [ 115.729620][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.816162][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.834491][ T9] usb usb4-port1: attempt power cycle [ 116.194654][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 116.215644][ T9] usb 4-1: device descriptor read/8, error -71 [ 116.218290][ T6296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.454772][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 116.476833][ T9] usb 4-1: device descriptor read/8, error -71 [ 116.584070][ T9] usb usb4-port1: unable to enumerate USB device [ 116.617385][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz.5.125'. [ 116.670583][ T49] nvmet: connect request for invalid subsystem t! [ 116.673415][ T6301] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 117.569466][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.578424][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.753716][ T5686] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 117.798791][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 117.915943][ T5686] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 117.917529][ T5686] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 117.917564][ T5686] usb 3-1: config 0 has no interface number 0 [ 117.917603][ T5686] usb 3-1: config 0 interface 41 has no altsetting 0 [ 117.921635][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.921659][ T5686] usb 3-1: Product: syz [ 117.921671][ T5686] usb 3-1: Manufacturer: syz [ 117.921684][ T5686] usb 3-1: SerialNumber: syz [ 117.923730][ T9] usb 6-1: device descriptor read/64, error -71 [ 117.965368][ T5686] usb 3-1: config 0 descriptor?? [ 118.169101][ T9] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 118.303803][ T9] usb 6-1: device descriptor read/64, error -71 [ 118.406112][ T6362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.136'. [ 118.416023][ T9] usb usb6-port1: attempt power cycle [ 118.659509][ T6367] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 118.659527][ T6367] PKCS7: Only support pkcs7_signedData type [ 118.707788][ T6367] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 118.759539][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 118.774340][ T9] usb 6-1: device descriptor read/8, error -71 [ 118.835805][ T5686] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 119.019695][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 119.037045][ T9] usb 6-1: device descriptor read/8, error -71 [ 119.147464][ T9] usb usb6-port1: unable to enumerate USB device [ 119.238392][ T5699] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 119.386476][ T5699] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 119.387394][ T5699] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 119.387407][ T5699] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.387416][ T5699] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.387426][ T5699] usb 7-1: config 0 has no interface number 0 [ 119.387448][ T5699] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.387743][ T5699] usb 7-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 119.387756][ T5699] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 119.389432][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.389445][ T5699] usb 7-1: Product: syz [ 119.389452][ T5699] usb 7-1: Manufacturer: syz [ 119.389459][ T5699] usb 7-1: SerialNumber: syz [ 119.396942][ T5699] usb 7-1: config 0 descriptor?? [ 119.622007][ T5699] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected [ 119.656810][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 119.681466][ T5699] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 119.701676][ T5699] usb 7-1: USB disconnect, device number 4 [ 119.731231][ T5699] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 119.734918][ T5699] cypress_m8 7-1:0.74: device disconnected [ 119.806917][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 119.828379][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.828417][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 119.831396][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 119.831417][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.831428][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 119.831440][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 119.831451][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.831461][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 119.900753][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.900779][ T9] usb 2-1: Product: syz [ 119.900815][ T9] usb 2-1: Manufacturer: syz [ 119.900828][ T9] usb 2-1: SerialNumber: syz [ 119.909505][ T9] usb 2-1: config 0 descriptor?? [ 119.910574][ T6385] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 119.926805][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.132276][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.132557][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.350759][ T9] usb 2-1: USB disconnect, device number 17 [ 120.402467][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.446847][ T5699] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 120.598745][ T5699] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 120.602280][ T5699] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 120.602305][ T5699] usb 4-1: config 0 has no interface number 0 [ 120.602367][ T5699] usb 4-1: config 0 interface 41 has no altsetting 0 [ 120.615723][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.615747][ T5699] usb 4-1: Product: syz [ 120.615760][ T5699] usb 4-1: Manufacturer: syz [ 120.615804][ T5699] usb 4-1: SerialNumber: syz [ 120.629602][ T5699] usb 4-1: config 0 descriptor?? [ 120.799314][ T6418] loop5: detected capacity change from 0 to 271 [ 120.837749][ T6420] netlink: 64 bytes leftover after parsing attributes in process `syz.6.147'. [ 120.867195][ T6420] syzkaller1: entered promiscuous mode [ 120.867218][ T6420] syzkaller1: entered allmulticast mode [ 121.324539][ T5717] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 121.407461][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 121.424610][ T5686] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 121.425038][ T5686] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 121.425385][ T5686] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 121.445486][ T5686] usb 3-1: USB disconnect, device number 14 [ 121.483718][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 121.499312][ T5717] usb 7-1: unable to get BOS descriptor or descriptor too short [ 121.499361][ T5717] usb 7-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 121.503026][ T5699] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 121.530665][ T5717] usb 7-1: config index 0 descriptor too short (expected 57, got 27) [ 121.530692][ T5717] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 121.557560][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.557586][ T5717] usb 7-1: Product: syz [ 121.557598][ T5717] usb 7-1: Manufacturer: syz [ 121.557611][ T5717] usb 7-1: SerialNumber: syz [ 121.557925][ T10] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 121.565992][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.566019][ T10] usb 6-1: config 1 has no interface number 0 [ 121.566057][ T10] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 121.566109][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 121.566144][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 121.578011][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 121.578035][ T10] usb 6-1: Product: syz [ 121.578047][ T10] usb 6-1: Manufacturer: syz [ 121.578060][ T10] usb 6-1: SerialNumber: syz [ 121.811031][ T6428] netlink: 'syz.5.152': attribute type 1 has an invalid length. [ 121.824647][ T6428] veth1_to_hsr: entered promiscuous mode [ 121.824670][ T6428] veth1_to_hsr: entered allmulticast mode [ 121.858816][ T6428] macvlan2: entered promiscuous mode [ 121.858841][ T6428] macvlan2: entered allmulticast mode [ 121.877540][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.151'. [ 121.902768][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.151'. [ 121.903426][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.151'. [ 121.914708][ T59] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.914752][ T59] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.914782][ T59] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.914839][ T59] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.928693][ T946] usb 7-1: USB disconnect, device number 5 [ 121.936847][ T5686] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 122.023698][ T864] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 122.087567][ T5686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.087999][ T5686] usb 3-1: not running at top speed; connect to a high speed hub [ 122.088016][ T5686] usb 3-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice= 5.86 [ 122.088821][ T5686] usb 3-1: config 1 has an invalid interface number: 122 but max is 0 [ 122.088834][ T5686] usb 3-1: config 1 has no interface number 0 [ 122.088856][ T5686] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 122.088869][ T5686] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 122.088882][ T5686] usb 3-1: config 1 interface 122 has no altsetting 0 [ 122.088899][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.093274][ T6433] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.201924][ T10] usb 6-1: USB disconnect, device number 7 [ 122.214370][ T864] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 122.215626][ T864] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 122.215651][ T864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.215666][ T864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.215855][ T864] usb 2-1: config 0 has no interface number 0 [ 122.215892][ T864] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.215911][ T864] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 122.215933][ T864] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 122.219047][ T864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.219070][ T864] usb 2-1: Product: syz [ 122.219082][ T864] usb 2-1: Manufacturer: syz [ 122.219095][ T864] usb 2-1: SerialNumber: syz [ 122.223400][ T864] usb 2-1: config 0 descriptor?? [ 122.312059][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.532728][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.6.156'. [ 122.553984][ T864] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 122.574824][ T864] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 122.578503][ T864] usb 2-1: USB disconnect, device number 18 [ 122.609893][ T864] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 122.624485][ T864] cypress_m8 2-1:0.74: device disconnected [ 122.640675][ T5735] udevd[5735]: setting owner of /dev/bus/usb/002/018 to uid=0, gid=0 failed: No such file or directory [ 122.702888][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.715130][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.157'. [ 122.715152][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.157'. [ 122.715185][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.157'. [ 122.719980][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.731152][ T6446] netlink: 36 bytes leftover after parsing attributes in process `syz.6.157'. [ 122.887859][ T6452] syzkaller0: entered promiscuous mode [ 122.887874][ T6452] syzkaller0: entered allmulticast mode [ 122.892076][ T6452] tipc: Started in network mode [ 122.892096][ T6452] tipc: Node identity b623ecd7ac5e, cluster identity 4711 [ 122.892270][ T6452] tipc: Enabled bearer , priority 0 [ 122.909672][ T6452] tipc: Resetting bearer [ 122.937004][ T5686] usb 3-1: string descriptor 0 read error: -71 [ 122.941201][ T5686] ti_usb_3410_5052 3-1:1.122: TI USB 5052 2 port adapter converter detected [ 122.956283][ T5686] usb 3-1: USB disconnect, device number 15 [ 123.070820][ T6451] tipc: Resetting bearer [ 123.103190][ T6451] tipc: Disabling bearer [ 123.785405][ T6475] syzkaller0: entered promiscuous mode [ 124.106074][ T5699] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 124.106795][ T5699] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 124.106931][ T5699] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 124.120932][ T5699] usb 4-1: USB disconnect, device number 15 [ 124.286050][ T5730] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.434479][ T5730] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 124.435605][ T5730] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.435628][ T5730] usb 6-1: config 1 has no interface number 0 [ 124.435658][ T5730] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 124.435683][ T5730] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 124.435712][ T5730] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 124.440720][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 124.440745][ T5730] usb 6-1: Product: syz [ 124.440758][ T5730] usb 6-1: Manufacturer: syz [ 124.440770][ T5730] usb 6-1: SerialNumber: syz [ 124.673737][ T5717] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 124.733801][ T5699] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 124.772618][ T6482] netlink: 'syz.5.168': attribute type 1 has an invalid length. [ 124.789364][ T6482] macvlan1: entered promiscuous mode [ 124.789388][ T6482] macvlan1: entered allmulticast mode [ 124.805113][ T5717] usb 4-1: device descriptor read/64, error -71 [ 124.883667][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 124.884516][ T5699] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 124.885511][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.885532][ T5699] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.885565][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.892832][ T5699] usb 2-1: config 0 descriptor?? [ 124.975723][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 125.074468][ T5717] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 125.124858][ T9] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 125.125981][ T9] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 125.126002][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.126019][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.126036][ T9] usb 7-1: config 0 has no interface number 0 [ 125.126074][ T9] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.126092][ T9] usb 7-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 125.126113][ T9] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 125.131320][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.131345][ T9] usb 7-1: Product: syz [ 125.131357][ T9] usb 7-1: Manufacturer: syz [ 125.131370][ T9] usb 7-1: SerialNumber: syz [ 125.162126][ T5730] usb 6-1: USB disconnect, device number 8 [ 125.176211][ T9] usb 7-1: config 0 descriptor?? [ 125.213687][ T5717] usb 4-1: device descriptor read/64, error -71 [ 125.291298][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.319444][ T5717] usb usb4-port1: attempt power cycle [ 125.413868][ T9] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected [ 125.417686][ T9] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 125.421488][ T9] usb 7-1: USB disconnect, device number 6 [ 125.452808][ T9] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 125.453505][ T9] cypress_m8 7-1:0.74: device disconnected [ 125.653686][ T5717] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 125.677745][ T5717] usb 4-1: device descriptor read/8, error -71 [ 125.923673][ T5717] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 125.944349][ T5717] usb 4-1: device descriptor read/8, error -71 [ 126.056648][ T5717] usb usb4-port1: unable to enumerate USB device [ 126.473664][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 126.635085][ T9] usb 7-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 126.636494][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.636515][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.642213][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.642236][ T9] usb 7-1: Product: syz [ 126.642249][ T9] usb 7-1: Manufacturer: syz [ 126.642262][ T9] usb 7-1: SerialNumber: syz [ 126.933733][ T5730] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 127.083800][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 127.084534][ T5730] usb 3-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 127.087333][ T5730] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.087362][ T5730] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.087384][ T5730] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.087415][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.091734][ T5730] usb 3-1: config 0 descriptor?? [ 127.452021][ T9] usb 7-1: unit 5 not found! [ 127.566727][ T9] usb 7-1: USB disconnect, device number 7 [ 127.673436][ T5699] usb 2-1: USB disconnect, device number 19 [ 127.730880][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.851869][ T6518] bond2: option min_links: invalid value (18446744073709551608) [ 127.851893][ T6518] bond2: option min_links: allowed values 0 - 2147483647 [ 127.881662][ T6518] bond2 (unregistering): Released all slaves [ 128.364564][ T5699] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 128.535087][ T5699] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 128.536409][ T5699] usb 6-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 128.536438][ T5699] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.536471][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.541607][ T5699] usb 6-1: config 0 descriptor?? [ 128.543236][ T6546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 128.612221][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.614030][ T864] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.618758][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619257][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619264][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619346][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619353][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619424][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619428][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619529][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619533][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619579][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619584][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619682][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619687][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.619732][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.619738][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.620716][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.620726][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.620823][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.620830][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.620930][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.620938][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621009][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621016][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621299][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621308][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621416][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621423][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621520][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621526][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621604][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621633][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621709][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621715][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621798][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621804][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621877][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.621884][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.621977][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624104][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624197][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624229][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624308][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624315][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624423][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624430][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624597][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624605][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624709][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624716][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624817][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624823][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.624902][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.624908][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625009][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625016][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625116][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625123][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625201][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625229][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625308][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625314][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625420][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625426][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625528][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625534][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625612][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625619][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625717][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625724][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625822][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625829][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.625909][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.625936][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626014][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626021][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626115][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626122][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626247][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626254][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626366][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626373][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626450][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626457][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626602][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626609][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626709][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626716][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626817][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626823][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.626899][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.626942][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627021][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627028][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627126][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627132][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627233][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627240][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627323][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627330][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627429][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627436][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627534][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627541][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627620][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627647][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627725][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627731][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627830][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627836][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.627934][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.627941][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628020][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628026][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628123][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628130][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628228][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628235][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628311][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628344][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628424][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628431][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628530][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628537][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628636][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628642][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.628719][ T6562] binder: BINDER_SET_CONTEXT_MGR already set [ 128.628725][ T6562] binder: 6556:6562 ioctl 4018620d 200000000240 returned -16 [ 128.708791][ T31] audit: type=1326 audit(1790017114.954:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.708866][ T31] audit: type=1326 audit(1790017114.974:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.708904][ T31] audit: type=1326 audit(1790017114.974:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.708941][ T31] audit: type=1326 audit(1790017114.974:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.709002][ T31] audit: type=1326 audit(1790017114.974:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.709038][ T31] audit: type=1326 audit(1790017114.974:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.709075][ T31] audit: type=1326 audit(1790017114.974:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.709135][ T31] audit: type=1326 audit(1790017114.974:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.732586][ T31] audit: type=1326 audit(1790017114.974:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.732635][ T31] audit: type=1326 audit(1790017114.974:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faabe39e159 code=0x7ffc0000 [ 128.770560][ T864] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 128.772575][ T864] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 128.772598][ T864] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.772614][ T864] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.772631][ T864] usb 7-1: config 0 has no interface number 0 [ 128.772691][ T864] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.772709][ T864] usb 7-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 128.772730][ T864] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 128.790394][ T864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.790418][ T864] usb 7-1: Product: syz [ 128.790431][ T864] usb 7-1: Manufacturer: syz [ 128.790445][ T864] usb 7-1: SerialNumber: syz [ 128.813822][ T5717] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 128.818929][ T864] usb 7-1: config 0 descriptor?? [ 128.965096][ T5717] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 128.967801][ T5717] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 128.967826][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.974286][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.974309][ T5717] usb 4-1: Product: syz [ 128.974322][ T5717] usb 4-1: Manufacturer: syz [ 128.974355][ T5717] usb 4-1: SerialNumber: syz [ 129.018853][ T5717] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 129.049143][ T864] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected [ 129.090270][ T864] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 129.130775][ T864] usb 7-1: USB disconnect, device number 8 [ 129.178546][ T5699] usbhid 6-1:0.0: can't add hid device: -71 [ 129.178650][ T5699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 129.201610][ T864] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 129.204060][ T864] cypress_m8 7-1:0.74: device disconnected [ 129.224167][ T4972] bcm5974 4-1:1.0: could not read from device [ 129.287428][ T5717] usb 4-1: USB disconnect, device number 20 [ 129.404216][ T5699] usb 6-1: USB disconnect, device number 9 [ 129.554188][ T5618] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 129.708128][ T5618] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 129.710174][ T5618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.710202][ T5618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.710221][ T5618] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.710279][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.730945][ T5618] usb 2-1: config 0 descriptor?? [ 130.121601][ T5730] usbhid 3-1:0.0: can't add hid device: -71 [ 130.121725][ T5730] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 130.145536][ T5730] usb 3-1: USB disconnect, device number 16 [ 130.221826][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x6 [ 130.221863][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.221889][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.221913][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.221937][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.221962][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.268960][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.269000][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.269024][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.269048][ T5618] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 130.269175][ T5618] acrux 0003:1A34:0802.0003: item fetching failed at offset 37/41 [ 130.269814][ T5618] acrux 0003:1A34:0802.0003: parse failed [ 130.269877][ T5618] acrux 0003:1A34:0802.0003: probe with driver acrux failed with error -22 [ 130.439529][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 130.485463][ T9] usb 2-1: USB disconnect, device number 20 [ 130.506253][ T5699] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 130.600104][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 130.622165][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.632163][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.632189][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.639413][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.639438][ T10] usb 6-1: Product: syz [ 130.639451][ T10] usb 6-1: Manufacturer: syz [ 130.639463][ T10] usb 6-1: SerialNumber: syz [ 130.644053][ T5699] usb 7-1: device descriptor read/64, error -71 [ 130.688929][ T10] usb 6-1: 0:2 : does not exist [ 130.755577][ T6601] __nla_validate_parse: 2 callbacks suppressed [ 130.755595][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 130.755607][ T6601] netlink: 88 bytes leftover after parsing attributes in process `syz.2.199'. [ 130.844609][ T5618] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 130.876344][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 130.897698][ T5699] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 130.993870][ T5618] usb 4-1: Using ep0 maxpacket: 16 [ 130.994733][ T5618] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.996286][ T10] usb 6-1: USB disconnect, device number 10 [ 130.996453][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.996477][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.996495][ T5618] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.996529][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.046544][ T5699] usb 7-1: device descriptor read/64, error -71 [ 131.080847][ T5618] usb 4-1: config 0 descriptor?? [ 131.139934][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.165386][ T5699] usb usb7-port1: attempt power cycle [ 131.225479][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 131.384497][ T9] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 131.385781][ T9] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 131.385807][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.385823][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.385840][ T9] usb 3-1: config 0 has no interface number 0 [ 131.385879][ T9] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.385898][ T9] usb 3-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 131.385918][ T9] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 131.388672][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.388696][ T9] usb 3-1: Product: syz [ 131.388709][ T9] usb 3-1: Manufacturer: syz [ 131.388722][ T9] usb 3-1: SerialNumber: syz [ 131.394159][ T9] usb 3-1: config 0 descriptor?? [ 131.445007][ T946] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 131.514370][ T5699] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 131.516791][ T5618] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 131.544660][ T5618] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 131.551495][ T5699] usb 7-1: device descriptor read/8, error -71 [ 131.600091][ T946] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 131.602471][ T946] usb 2-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 131.602502][ T946] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.602558][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.616620][ T946] usb 2-1: config 0 descriptor?? [ 131.622639][ T9] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 131.623535][ T6606] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 131.702344][ T9] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 131.764947][ T9] usb 3-1: USB disconnect, device number 17 [ 131.799038][ T9] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 131.804161][ T5699] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 131.807869][ T9] cypress_m8 3-1:0.74: device disconnected [ 131.840922][ T5699] usb 7-1: device descriptor read/8, error -71 [ 131.860677][ T10] usb 4-1: USB disconnect, device number 21 [ 131.947125][ T5699] usb usb7-port1: unable to enumerate USB device [ 132.244772][ T946] usbhid 2-1:0.0: can't add hid device: -71 [ 132.244877][ T946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.255215][ T946] usb 2-1: USB disconnect, device number 21 [ 132.728774][ T6622] bridge1: entered promiscuous mode [ 132.766944][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767026][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.833424][ T5623] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 133.045462][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 133.503651][ T5618] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 133.547284][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 133.656752][ T5618] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 133.660883][ T5618] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.660909][ T5618] usb 3-1: config 1 has no interface number 0 [ 133.660945][ T5618] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 133.660974][ T5618] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 133.661010][ T5618] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 133.663312][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 133.663333][ T5618] usb 3-1: Product: syz [ 133.663346][ T5618] usb 3-1: Manufacturer: syz [ 133.663357][ T5618] usb 3-1: SerialNumber: syz [ 133.695956][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 133.696750][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 133.697890][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.709139][ T10] usb 2-1: config 0 descriptor?? [ 133.827013][ T6650] trusted_key: encrypted_key: insufficient parameters specified [ 133.927715][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 133.969669][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.986609][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 133.987226][ T10] usb 2-1: media controller created [ 134.089834][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.105484][ T946] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 134.111008][ T6653] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 134.255766][ T946] usb 6-1: Using ep0 maxpacket: 32 [ 134.269536][ T946] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.40 [ 134.273416][ T946] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.273444][ T946] usb 6-1: config 1 interface 0 has no altsetting 0 [ 134.311891][ T6653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.323897][ T946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.323922][ T946] usb 6-1: Product: ц [ 134.323936][ T946] usb 6-1: Manufacturer: ᐁ [ 134.323949][ T946] usb 6-1: SerialNumber: 塰䥕伻嫰憜ጮ怷ⶨ툿郵⓪駹⢥酤䅴륍ެ㹶ᝠꤐ臻㷏૚ܛ扞ያ驧㇧놴药楗꽛飬讵抭욒䤥露阁줈﾿༥ [ 134.425144][ T6656] bond1: (slave veth0_to_bond): Releasing active interface [ 134.425174][ T6656] veth0_to_bond: left promiscuous mode [ 134.425377][ T6656] veth0_to_bond: left allmulticast mode [ 134.477217][ T6645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.502102][ T6656] bond2: (slave veth0_to_bond): making interface the new active one [ 134.515048][ T6656] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 134.539558][ T6657] bond2: entered promiscuous mode [ 134.539583][ T6657] veth0_to_bond: entered promiscuous mode [ 134.539763][ T6657] bond2: entered allmulticast mode [ 134.539774][ T6657] veth0_to_bond: entered allmulticast mode [ 134.572895][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.573490][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.615107][ T6651] bridge0: entered allmulticast mode [ 134.653829][ T946] usbhid 6-1:1.0: can't add hid device: -71 [ 134.653905][ T946] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 134.665015][ T946] usb 6-1: USB disconnect, device number 11 [ 134.913539][ T6641] macvlan2: entered promiscuous mode [ 134.914097][ T6641] macvlan2: entered allmulticast mode [ 134.921736][ T6641] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.935699][ T6641] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 135.125122][ T10] stb0899_attach: Driver disabled by Kconfig [ 135.125141][ T10] az6027: no front-end attached [ 135.125141][ T10] [ 135.261840][ T5618] usb 3-1: USB disconnect, device number 18 [ 135.597495][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.620750][ T10] az6027: usb out operation failed. (-71) [ 135.620768][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 135.633305][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 135.655068][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 135.655112][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 135.668482][ T10] usb 2-1: USB disconnect, device number 22 [ 136.023179][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.294139][ T5686] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 136.443928][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 136.445018][ T5686] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 136.449779][ T5686] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 136.449802][ T5686] usb 3-1: config 179 has no interface number 0 [ 136.449842][ T5686] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 136.449864][ T5686] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 136.449888][ T5686] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.449911][ T5686] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 136.449934][ T5686] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 136.449974][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.457122][ T6667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.578407][ T6677] No buffer was provided with the request [ 136.594835][ T5618] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 136.668520][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 136.668540][ T31] audit: type=1326 audit(1790017122.924:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.223" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcd9e159 code=0x7ffc0000 [ 136.669807][ T31] audit: type=1326 audit(1790017122.924:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.223" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcd9e159 code=0x7ffc0000 [ 136.723649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.754372][ T5618] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 136.755534][ T5618] usb 2-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 136.755565][ T5618] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.755595][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.761828][ T5618] usb 2-1: config 0 descriptor?? [ 136.762620][ T6673] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.828652][ T5686] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 137.257487][ T5618] usbhid 2-1:0.0: can't add hid device: -71 [ 137.257595][ T5618] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 137.281807][ T5618] usb 2-1: USB disconnect, device number 23 [ 137.391654][ T6687] block device autoloading is deprecated and will be removed. [ 137.493828][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 137.529479][ T59] IPVS: starting estimator thread 0... [ 137.541048][ T6692] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 137.624000][ T6695] IPVS: using max 28 ests per chain, 67200 per kthread [ 137.644091][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 137.645274][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 137.648978][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.649025][ T10] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.649050][ T10] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.649143][ T10] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.649167][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 137.649199][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.734339][ T10] usb 6-1: config 0 descriptor?? [ 137.824875][ T5730] usb 3-1: USB disconnect, device number 19 [ 137.824890][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 137.825028][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 137.992342][ T6703] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 138.159204][ T10] hid_parser_main: 8 callbacks suppressed [ 138.159227][ T10] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 138.159258][ T10] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 138.159284][ T10] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 138.159310][ T10] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 138.159336][ T10] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 138.204122][ T5686] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 138.278197][ T10] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 138.312030][ T2323] IPVS: stop unused estimator thread 0... [ 138.333724][ T5730] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 138.369941][ T5686] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 138.372444][ T5686] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.372468][ T5686] usb 2-1: config 1 has no interface number 0 [ 138.372503][ T5686] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 138.372530][ T5686] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 138.372562][ T5686] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 138.373133][ T10] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -38 [ 138.378047][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.378515][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.398152][ T6714] input: syz0 as /devices/virtual/input/input12 [ 138.451011][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 138.452270][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 138.452294][ T5686] usb 2-1: Product: syz [ 138.452306][ T5686] usb 2-1: Manufacturer: syz [ 138.452318][ T5686] usb 2-1: SerialNumber: syz [ 138.495257][ T5730] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 138.496210][ T5730] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 138.496231][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.496248][ T5730] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.496266][ T5730] usb 3-1: config 0 has no interface number 0 [ 138.496301][ T5730] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.496318][ T5730] usb 3-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 138.496339][ T5730] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 138.498704][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.498726][ T5730] usb 3-1: Product: syz [ 138.498738][ T5730] usb 3-1: Manufacturer: syz [ 138.498776][ T5730] usb 3-1: SerialNumber: syz [ 138.503343][ T5730] usb 3-1: config 0 descriptor?? [ 138.716598][ T5730] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 138.730471][ T5730] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 138.738320][ T5730] usb 3-1: USB disconnect, device number 20 [ 138.768986][ T5730] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 138.769605][ T5730] cypress_m8 3-1:0.74: device disconnected [ 138.829925][ T6700] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 138.875653][ T6700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.912890][ T6700] bond1: (slave veth0_to_bond): making interface the new active one [ 138.922475][ T6700] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.940172][ T6700] bond1: entered promiscuous mode [ 138.940218][ T6700] veth0_to_bond: entered promiscuous mode [ 138.940348][ T6700] bond1: entered allmulticast mode [ 138.940355][ T6700] veth0_to_bond: entered allmulticast mode [ 138.957520][ T6700] macvlan2: entered promiscuous mode [ 138.957543][ T6700] macvlan2: entered allmulticast mode [ 138.959011][ T6700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.967068][ T6700] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 139.063679][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 139.214455][ T10] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 139.215844][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 139.215871][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 139.215916][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 139.215935][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 139.218610][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.218633][ T10] usb 4-1: Product: syz [ 139.218647][ T10] usb 4-1: Manufacturer: syz [ 139.218684][ T10] usb 4-1: SerialNumber: syz [ 139.222453][ T10] usb 4-1: config 0 descriptor?? [ 139.232833][ T10] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 139.351257][ T5686] usb 2-1: USB disconnect, device number 24 [ 139.436778][ T10] scsi host1: usb-storage 4-1:0.0 [ 139.480900][ T10] usb 4-1: USB disconnect, device number 22 [ 139.513062][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.042180][ T6741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.078780][ T6741] bond2: (slave ip6erspan0): making interface the new active one [ 140.080649][ T6741] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 140.166303][ T5730] usb 6-1: USB disconnect, device number 12 [ 140.183699][ T5618] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 140.279795][ T6752] fuse: Invalid gid '0x0000000000000003' [ 140.342369][ T5618] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 140.343670][ T5618] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 140.343693][ T5618] usb 3-1: config 0 has no interface number 0 [ 140.343731][ T5618] usb 3-1: config 0 interface 41 has no altsetting 0 [ 140.349174][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.349199][ T5618] usb 3-1: Product: syz [ 140.349211][ T5618] usb 3-1: Manufacturer: syz [ 140.349223][ T5618] usb 3-1: SerialNumber: syz [ 140.368843][ T5618] usb 3-1: config 0 descriptor?? [ 140.423634][ T6757] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 140.533648][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 140.552984][ T6757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.241'. [ 140.577353][ T6757] syz.3.241 (6757) used greatest stack depth: 17632 bytes left [ 140.615427][ T5730] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 140.688307][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 140.689614][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.689639][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 140.692603][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.692628][ T10] usb 2-1: Product: syz [ 140.692641][ T10] usb 2-1: Manufacturer: syz [ 140.692654][ T10] usb 2-1: SerialNumber: syz [ 140.712964][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 140.787362][ T5730] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 140.788846][ T5730] usb 6-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 140.788899][ T5730] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.788932][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.792426][ T5730] usb 6-1: config 0 descriptor?? [ 140.793198][ T6754] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 140.964818][ T10] usb 2-1: Limiting number of CPorts to U8_MAX [ 141.084315][ T864] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 141.165764][ T6752] random: crng reseeded on system resumption [ 141.209354][ T5618] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 141.235541][ T864] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 141.236724][ T864] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.236747][ T864] usb 4-1: config 1 has no interface number 0 [ 141.236785][ T864] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 141.236849][ T864] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 141.236870][ T864] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 141.238917][ T864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 141.238938][ T864] usb 4-1: Product: syz [ 141.238952][ T864] usb 4-1: Manufacturer: syz [ 141.238965][ T864] usb 4-1: SerialNumber: syz [ 141.414893][ T5730] usbhid 6-1:0.0: can't add hid device: -71 [ 141.415019][ T5730] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 141.423092][ T5730] usb 6-1: USB disconnect, device number 13 [ 141.476249][ T6766] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 141.510415][ T6766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.534387][ T6766] bond1: (slave veth0_to_bond): Releasing active interface [ 141.534416][ T6766] veth0_to_bond: left promiscuous mode [ 141.534642][ T6766] veth0_to_bond: left allmulticast mode [ 141.540585][ T6766] bond2: (slave veth0_to_bond): making interface the new active one [ 141.541980][ T6766] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 141.572438][ T6766] bond2: entered promiscuous mode [ 141.572460][ T6766] veth0_to_bond: entered promiscuous mode [ 141.572714][ T6766] bond2: entered allmulticast mode [ 141.572727][ T6766] veth0_to_bond: entered allmulticast mode [ 141.619158][ T6766] macvlan5: entered promiscuous mode [ 141.619182][ T6766] macvlan5: entered allmulticast mode [ 141.620605][ T6766] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 141.622931][ T6766] bond2: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 141.688104][ T10] usb 2-1: failed to send ARPC request 1: -110 [ 141.688242][ T10] usb 2-1: failed to execute ARPC: -110 [ 141.688266][ T10] usb 2-1: failed to set connected state for cport 0: -110 [ 141.688282][ T10] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 141.688846][ T10] usb 2-1: failed to send ARPC request 3: -32 [ 141.688975][ T10] usb 2-1: failed to execute ARPC: -32 [ 141.689003][ T10] usb 2-1: failed to clear cport 0: -32 [ 141.689019][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 141.726657][ T10] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 141.942202][ T864] usb 4-1: USB disconnect, device number 23 [ 142.038324][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.286983][ T6771] pimreg: entered allmulticast mode [ 142.295397][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.246'. [ 142.622220][ T6776] x_tables: unsorted entry at hook 3 [ 142.672099][ T6782] batadv_slave_0: entered promiscuous mode [ 142.676643][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 142.681544][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.736789][ T6782] batadv_slave_0 (unregistering): left promiscuous mode [ 142.736861][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.801623][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 143.366690][ T10] usb 2-1: USB disconnect, device number 25 [ 143.708025][ T5618] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 143.709743][ T5618] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 143.709970][ T5618] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 143.763072][ T5618] usb 3-1: USB disconnect, device number 21 [ 144.073638][ T5699] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 144.224921][ T5699] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 144.226868][ T5699] usb 4-1: config 2 has an invalid interface number: 228 but max is 0 [ 144.226890][ T5699] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 144.226900][ T5699] usb 4-1: config 2 has no interface number 0 [ 144.226921][ T5699] usb 4-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.226935][ T5699] usb 4-1: config 2 interface 228 has no altsetting 0 [ 144.229431][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.229447][ T5699] usb 4-1: Product: syz [ 144.229454][ T5699] usb 4-1: Manufacturer: syz [ 144.229462][ T5699] usb 4-1: SerialNumber: syz [ 144.263806][ T5618] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 144.474414][ T5618] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 144.477936][ T5618] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 144.477963][ T5618] usb 3-1: config 1 has no interface number 0 [ 144.478000][ T5618] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 144.478020][ T5618] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 144.478040][ T5618] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 144.482587][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 144.482606][ T5618] usb 3-1: Product: syz [ 144.482976][ T5618] usb 3-1: Manufacturer: syz [ 144.482991][ T5618] usb 3-1: SerialNumber: syz [ 144.837382][ T6807] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 144.947348][ T6807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.960733][ T6815] bond2: (slave veth0_to_bond): Releasing active interface [ 144.960760][ T6815] veth0_to_bond: left promiscuous mode [ 144.960931][ T6815] veth0_to_bond: left allmulticast mode [ 145.035636][ T6815] bond3: (slave veth0_to_bond): making interface the new active one [ 145.039528][ T6815] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.051807][ T6807] bond3: entered promiscuous mode [ 145.051861][ T6807] veth0_to_bond: entered promiscuous mode [ 145.052099][ T6807] bond3: entered allmulticast mode [ 145.052112][ T6807] veth0_to_bond: entered allmulticast mode [ 145.148749][ T6807] macvlan2: entered promiscuous mode [ 145.148767][ T6807] macvlan2: entered allmulticast mode [ 145.155053][ T6807] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.165639][ T6807] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 145.598164][ T5618] usb 3-1: USB disconnect, device number 22 [ 146.173813][ T864] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 146.185975][ T5699] ims_pcu 4-1:2.228: Zero length descriptor [ 146.186023][ T5699] ims_pcu 4-1:2.228: probe with driver ims_pcu failed with error -22 [ 146.198170][ T5699] usb 4-1: USB disconnect, device number 24 [ 146.335689][ T6823] syzkaller1: entered promiscuous mode [ 146.337727][ T6823] syzkaller1: entered allmulticast mode [ 146.360290][ T864] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 146.362037][ T864] usb 6-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 146.362066][ T864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 146.362096][ T864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.382515][ T6825] syz_tun: entered promiscuous mode [ 146.387472][ T6825] syz_tun: left promiscuous mode [ 146.412330][ T864] usb 6-1: config 0 descriptor?? [ 146.413097][ T6817] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 146.733639][ T946] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.883661][ T946] usb 3-1: Using ep0 maxpacket: 8 [ 146.885022][ T946] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 146.892564][ T946] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 146.900712][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.900737][ T946] usb 3-1: Product: syz [ 146.900749][ T946] usb 3-1: Manufacturer: syz [ 146.900762][ T946] usb 3-1: SerialNumber: syz [ 146.940460][ T946] usb 3-1: config 0 descriptor?? [ 147.062062][ T864] usbhid 6-1:0.0: can't add hid device: -71 [ 147.062165][ T864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 147.092976][ T864] usb 6-1: USB disconnect, device number 14 [ 147.260017][ T946] usb 3-1: USB disconnect, device number 23 [ 147.780215][ T6856] syzkaller0: entered promiscuous mode [ 147.780240][ T6856] syzkaller0: entered allmulticast mode [ 147.795035][ T6856] tipc: Started in network mode [ 147.795065][ T6856] tipc: Node identity baa030018b68, cluster identity 4711 [ 147.795365][ T6856] tipc: Enabled bearer , priority 0 [ 147.824828][ T6856] tipc: Resetting bearer [ 147.859464][ T6855] tipc: Resetting bearer [ 147.921367][ T6855] tipc: Disabling bearer [ 148.203872][ T5699] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 148.253697][ T864] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 148.353735][ T946] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 148.354572][ T5699] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 148.355899][ T5699] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.355924][ T5699] usb 2-1: config 1 has no interface number 0 [ 148.355961][ T5699] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 148.356109][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 148.357560][ T5699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 148.359516][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 148.359533][ T5699] usb 2-1: Product: syz [ 148.359540][ T5699] usb 2-1: Manufacturer: syz [ 148.359547][ T5699] usb 2-1: SerialNumber: syz [ 148.451800][ T864] usb 3-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice=91.20 [ 148.463588][ T864] usb 3-1: config 15 has an invalid interface number: 216 but max is 0 [ 148.463615][ T864] usb 3-1: config 15 has no interface number 0 [ 148.463654][ T864] usb 3-1: config 15 interface 216 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 148.463677][ T864] usb 3-1: config 15 interface 216 has no altsetting 0 [ 148.465628][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.465651][ T864] usb 3-1: Product: syz [ 148.465663][ T864] usb 3-1: Manufacturer: syz [ 148.465677][ T864] usb 3-1: SerialNumber: syz [ 148.506825][ T946] usb 6-1: Using ep0 maxpacket: 16 [ 148.507557][ T946] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 148.510258][ T946] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 148.510280][ T946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.510297][ T946] usb 6-1: config 0 has no interface number 0 [ 148.517183][ T946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.517206][ T946] usb 6-1: Product: syz [ 148.517218][ T946] usb 6-1: Manufacturer: syz [ 148.517231][ T946] usb 6-1: SerialNumber: syz [ 148.530715][ T946] usb 6-1: config 0 descriptor?? [ 148.539556][ T946] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 148.591815][ T6863] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 148.624387][ T6863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.650298][ T6863] bond1: (slave veth0_to_bond): Releasing active interface [ 148.650333][ T6863] veth0_to_bond: left promiscuous mode [ 148.650501][ T6863] veth0_to_bond: left allmulticast mode [ 148.661442][ T6863] bond3: (slave veth0_to_bond): making interface the new active one [ 148.667148][ T6863] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.729846][ T6863] bond3: entered promiscuous mode [ 148.729872][ T6863] veth0_to_bond: entered promiscuous mode [ 148.730084][ T6863] bond3: entered allmulticast mode [ 148.730092][ T6863] veth0_to_bond: entered allmulticast mode [ 148.789768][ T9] usb 6-1: USB disconnect, device number 15 [ 148.836847][ T6863] macvlan2: entered promiscuous mode [ 148.836871][ T6863] macvlan2: entered allmulticast mode [ 148.870435][ T6863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.884626][ T6863] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 148.981077][ T5623] Bluetooth: hci4: Unexpected cc 0x0000 with no status [ 149.099073][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 149.287979][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'. [ 149.291426][ T5699] usb 2-1: USB disconnect, device number 26 [ 149.374991][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.824762][ T6879] syzkaller1: entered promiscuous mode [ 149.824787][ T6879] syzkaller1: entered allmulticast mode [ 150.040602][ T6894] loop7: detected capacity change from 0 to 16384 [ 150.097641][ T864] smsc95xx 3-1:15.216 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 150.097818][ T864] smsc95xx 3-1:15.216: probe with driver smsc95xx failed with error -22 [ 150.107181][ T6895] loop7: detected capacity change from 16384 to 16383 [ 150.134015][ T5699] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 150.177427][ T864] usb 3-1: USB disconnect, device number 24 [ 150.304509][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 150.320881][ T5699] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=59.4c [ 150.323496][ T5699] usb 2-1: config 5 has an invalid interface number: 181 but max is 2 [ 150.323514][ T5699] usb 2-1: config 5 has an invalid interface number: 226 but max is 2 [ 150.323524][ T5699] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 150.323673][ T5699] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 150.323691][ T5699] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 150.323707][ T5699] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 150.323723][ T5699] usb 2-1: config 5 has an invalid interface number: 159 but max is 2 [ 150.323741][ T5699] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 150.323756][ T5699] usb 2-1: config 5 has no interface number 0 [ 150.323770][ T5699] usb 2-1: config 5 has no interface number 1 [ 150.323784][ T5699] usb 2-1: config 5 has no interface number 2 [ 150.323844][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 150.323863][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has an endpoint descriptor with address 0x11, changing to 0x1 [ 150.324950][ T5699] usb 2-1: config 5 interface 181 altsetting 2 endpoint 0x1 has invalid maxpacket 36362, setting to 64 [ 150.324976][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 150.324996][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 150.325016][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 150.325036][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 150.325069][ T5699] usb 2-1: config 5 interface 181 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 150.325110][ T5699] usb 2-1: config 5 interface 226 altsetting 86 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 150.325132][ T5699] usb 2-1: config 5 interface 226 altsetting 86 endpoint 0x9 has invalid maxpacket 520, setting to 64 [ 150.325155][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has an invalid descriptor for endpoint zero, skipping [ 150.325174][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has a duplicate endpoint with address 0xD, skipping [ 150.325194][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has a duplicate endpoint with address 0xA, skipping [ 150.325213][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has a duplicate endpoint with address 0xA, skipping [ 150.325232][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 150.325253][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has a duplicate endpoint with address 0x87, skipping [ 150.325272][ T5699] usb 2-1: config 5 interface 226 altsetting 86 has a duplicate endpoint with address 0x6, skipping [ 150.325292][ T5699] usb 2-1: config 5 interface 226 altsetting 86 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 150.325325][ T5699] usb 2-1: config 5 interface 159 altsetting 253 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 150.325349][ T5699] usb 2-1: config 5 interface 159 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 150.325383][ T5699] usb 2-1: config 5 interface 159 altsetting 253 has a duplicate endpoint with address 0xB, skipping [ 150.325402][ T5699] usb 2-1: config 5 interface 181 has no altsetting 0 [ 150.325418][ T5699] usb 2-1: config 5 interface 226 has no altsetting 0 [ 150.325433][ T5699] usb 2-1: config 5 interface 159 has no altsetting 0 [ 150.417485][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.417512][ T5699] usb 2-1: Product: ࠇ [ 150.417525][ T5699] usb 2-1: Manufacturer: ࠒ [ 150.417538][ T5699] usb 2-1: SerialNumber: 盍զߑ堐࿻㦸饊鿣艙퉴柴㲶ʠ畽ꊒ䃙꾚犥ࡿ⣻鳲纷כּ蓮큳鈗鍸펿閄䌑魴킉꾞撧쬗Ⰻ袓䐋䩯챐읮㗧樸ᒁﲰ伻捌뵌ो銅掌阣攅ᑆ쒯鷆嬡ⶡ腳 [ 150.431136][ T5699] usb 2-1: Interface #181 referenced by multiple IADs [ 150.431208][ T5699] usb 2-1: Interface #226 referenced by multiple IADs [ 150.431257][ T5699] usb 2-1: Interface #159 referenced by multiple IADs [ 150.490709][ T6886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.804692][ T6903] vxcan1: tx drop: invalid da for name 0x00000000000000f5 [ 151.083420][ T59] IPVS: starting estimator thread 0... [ 151.193717][ T6908] IPVS: using max 27 ests per chain, 64800 per kthread [ 151.213588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.233596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 151.473594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.903582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.003587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.178098][ T6912] cgroup: fork rejected by pids controller in /syz5 [ 152.195891][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 152.353581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 152.389954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 152.434047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 152.443922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 152.615981][ T9] usb 6-1: device descriptor read/64, error -71 [ 153.298734][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 154.929191][ T9] usb 6-1: device descriptor read/64, error -71 [ 155.222903][ T9] usb usb6-port1: attempt power cycle [ 156.181203][ C1] sched: DL replenish lagged too much [ 157.358667][ T6958] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 161.747648][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 166.969410][ T9] usb 6-1: device descriptor read/8, error -110 [ 200.691139][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.699282][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.866987][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 202.867091][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 202.867134][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 224.697974][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 224.698065][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 255.757122][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764960][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.589735][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.597923][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.943499][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 329.950484][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6909/1:b..l [ 329.958416][ C1] rcu: (detected by 1, t=10503 jiffies, g=26705, q=3420 ncpus=2) [ 329.966254][ C1] task:syz.5.280 state:R running task stack:25384 pid:6909 tgid:6909 ppid:5984 task_flags:0x400040 flags:0x00080002 [ 329.979785][ C1] Call Trace: [ 329.983085][ C1] [ 329.986033][ C1] __schedule+0x17db/0x58f0 [ 329.990598][ C1] ? __pfx___schedule+0x10/0x10 [ 329.995736][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 330.000959][ C1] ? irqentry_exit+0x218/0x910 [ 330.005749][ C1] ? unwind_next_frame+0x8f/0x2550 [ 330.010877][ C1] preempt_schedule_notrace+0x56/0x90 [ 330.016262][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 330.022264][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.028427][ C1] ? unwind_next_frame+0x8f/0x2550 [ 330.033557][ C1] rcu_is_watching+0x81/0xb0 [ 330.038337][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 330.043643][ C1] unwind_next_frame+0xbe/0x2550 [ 330.048602][ C1] ? __reset_page_owner+0x71/0x1f0 [ 330.053728][ C1] ? unwind_next_frame+0x8f/0x2550 [ 330.058860][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.065020][ C1] arch_stack_walk+0x11b/0x150 [ 330.069802][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 330.075128][ C1] stack_trace_save+0xa9/0x100 [ 330.079995][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 330.085375][ C1] ? __lock_acquire+0x747/0x2de0 [ 330.090343][ C1] save_stack+0x122/0x230 [ 330.094745][ C1] ? __pfx_save_stack+0x10/0x10 [ 330.099705][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 330.105159][ C1] ? page_ext_put+0x97/0xc0 [ 330.109692][ C1] __reset_page_owner+0x71/0x1f0 [ 330.114750][ C1] __free_frozen_pages+0xc93/0xd90 [ 330.119948][ C1] __slab_free+0x274/0x2c0 [ 330.124481][ C1] ? lock_acquire+0x115/0x350 [ 330.129226][ C1] ? qlist_free_all+0x8e/0x100 [ 330.134104][ C1] qlist_free_all+0x99/0x100 [ 330.138805][ C1] kasan_quarantine_reduce+0x148/0x160 [ 330.144309][ C1] __kasan_slab_alloc+0x22/0x80 [ 330.149286][ C1] __kmalloc_noprof+0x307/0x720 [ 330.154162][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 330.159246][ C1] ? security_task_alloc+0x4d/0x330 [ 330.164481][ C1] ? security_task_alloc+0x4d/0x330 [ 330.169807][ C1] security_task_alloc+0x4d/0x330 [ 330.174942][ C1] copy_process+0x1c49/0x4400 [ 330.179656][ C1] ? copy_process+0xd16/0x4400 [ 330.184458][ C1] ? __pfx_copy_process+0x10/0x10 [ 330.189604][ C1] kernel_clone+0x2d7/0x940 [ 330.194149][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 330.199231][ C1] __se_sys_clone3+0x33c/0x360 [ 330.204023][ C1] ? __pfx___se_sys_clone3+0x10/0x10 [ 330.209344][ C1] ? _copy_to_user+0x8a/0xb0 [ 330.213970][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 330.219282][ C1] do_syscall_64+0x166/0x520 [ 330.223895][ C1] ? trace_irq_disable+0x3b/0x140 [ 330.228932][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.235014][ C1] ? clear_bhb_loop+0x70/0xc0 [ 330.239708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.245616][ C1] RIP: 0033:0x7fd6fcd9ef49 [ 330.250054][ C1] RSP: 002b:00007fd6fd14f908 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 330.258476][ C1] RAX: ffffffffffffffda RBX: 00007fd6fcd5a4e0 RCX: 00007fd6fcd9ef49 [ 330.266472][ C1] RDX: 00007fd6fcd5a4e0 RSI: 0000000000000058 RDI: 00007fd6fd14f960 [ 330.274544][ C1] RBP: 00007fd6fdc4b6c0 R08: 00007fd6fdc4b6c0 R09: 00007fd6fd14fa47 [ 330.282537][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 330.290522][ C1] R13: 000000000000006e R14: 00007fd6fd14f960 R15: 00007fd6fd14fa48 [ 330.298555][ C1] [ 330.301590][ C1] rcu: rcu_preempt kthread starved for 951 jiffies! g26705 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 330.312542][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 330.322613][ C1] rcu: RCU grace-period kthread stack dump: [ 330.328566][ C1] task:rcu_preempt state:R running task stack:27656 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 330.342169][ C1] Call Trace: [ 330.345476][ C1] [ 330.348424][ C1] __schedule+0x17db/0x58f0 [ 330.352972][ C1] ? __pfx___schedule+0x10/0x10 [ 330.357835][ C1] ? lock_acquire+0x115/0x350 [ 330.362547][ C1] ? schedule+0x90/0x2b0 [ 330.366816][ C1] schedule+0x164/0x2b0 [ 330.371429][ C1] schedule_timeout+0x152/0x2c0 [ 330.376294][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 330.381719][ C1] ? __pfx_process_timeout+0x10/0x10 [ 330.387037][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 330.392871][ C1] ? prepare_to_swait_event+0x322/0x350 [ 330.398449][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 330.403340][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 330.409528][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 330.414852][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 330.420082][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 330.425947][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 330.430562][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.435775][ C1] ? __kthread_parkme+0x71/0x1f0 [ 330.440740][ C1] ? __kthread_parkme+0x199/0x1f0 [ 330.445794][ C1] kthread+0x38b/0x480 [ 330.449879][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.455095][ C1] ? __pfx_kthread+0x10/0x10 [ 330.459712][ C1] ret_from_fork+0x514/0xb70 [ 330.464327][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 330.469461][ C1] ? __switch_to+0xc89/0x1420 [ 330.474175][ C1] ? __pfx_kthread+0x10/0x10 [ 330.478786][ C1] ret_from_fork_asm+0x1a/0x30 [ 330.483590][ C1] [ 330.486625][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 330.492987][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.503513][ C1] Tainted: [L]=SOFTLOCKUP [ 330.507845][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.517913][ C1] RIP: 0010:unwind_next_frame+0x29b/0x2550 [ 330.523750][ C1] Code: 00 00 45 39 e8 0f 84 07 04 00 00 4a 8d 14 ad 14 62 8d 90 45 29 e8 4e 8d 24 82 49 83 c4 fc 49 89 d5 4c 39 e2 0f 86 22 02 00 00 <49> 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 [ 330.543385][ C1] RSP: 0018:ffffc90000a17dc0 EFLAGS: 00000202 [ 330.549470][ C1] RAX: ffffffff90f35014 RBX: ffffffff90f35018 RCX: ffffffff90f3501c [ 330.557463][ C1] RDX: ffffffff90f35018 RSI: ffffffff91a1f002 RDI: ffffffff8c6da720 [ 330.565447][ C1] RBP: ffffffff8a0c562c R08: 0000000000000001 R09: 0000000000000000 [ 330.573441][ C1] R10: ffffc90000a17eb8 R11: ffffffff81b293f0 R12: ffffffff90f35018 [ 330.581422][ C1] R13: ffffffff90f35018 R14: ffffc90000a17e68 R15: ffffffff90f3501c [ 330.589405][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 330.598699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.605301][ C1] CR2: 00007f840034eccc CR3: 0000000074b70000 CR4: 00000000003526f0 [ 330.613291][ C1] Call Trace: [ 330.616581][ C1] [ 330.619435][ C1] ? nft_do_chain+0x48d/0x1b10 [ 330.624225][ C1] ? unwind_next_frame+0x8f/0x2550 [ 330.629355][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.635523][ C1] arch_stack_walk+0x11b/0x150 [ 330.640396][ C1] ? nft_do_chain+0x48d/0x1b10 [ 330.645188][ C1] stack_trace_save+0xa9/0x100 [ 330.649964][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 330.655347][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 330.660828][ C1] kasan_save_track+0x3e/0x80 [ 330.665519][ C1] ? kasan_save_track+0x3e/0x80 [ 330.670383][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 330.675603][ C1] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 330.681713][ C1] ? __alloc_skb+0x27a/0x7a0 [ 330.686333][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 330.692339][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 330.697750][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 330.703319][ C1] ? nft_do_chain+0x48d/0x1b10 [ 330.708685][ C1] __kasan_slab_alloc+0x6c/0x80 [ 330.713560][ C1] kmem_cache_alloc_node_noprof+0x354/0x610 [ 330.719480][ C1] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 330.725568][ C1] ? __alloc_skb+0x27a/0x7a0 [ 330.730172][ C1] ? __alloc_skb+0x27a/0x7a0 [ 330.734781][ C1] __alloc_skb+0x27a/0x7a0 [ 330.739223][ C1] synproxy_send_client_synack+0x175/0xde0 [ 330.745064][ C1] ? lock_acquire+0x115/0x350 [ 330.749753][ C1] ? synproxy_pernet+0x45/0x270 [ 330.754662][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 330.761015][ C1] ? nft_synproxy_eval_v4+0x400/0x4e0 [ 330.766404][ C1] ? synproxy_pernet+0x45/0x270 [ 330.771277][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 330.776501][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 330.782245][ C1] ? nf_ip_checksum+0x13c/0x510 [ 330.787207][ C1] nft_synproxy_do_eval+0x335/0x550 [ 330.792811][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 330.798558][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 330.804221][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 330.809884][ C1] nft_do_chain+0x48d/0x1b10 [ 330.814512][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 330.819583][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 330.824563][ C1] nft_do_chain_inet+0x360/0x4b0 [ 330.829520][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 330.834997][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 330.839781][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 330.845174][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 330.850663][ C1] nf_hook_slow+0xc5/0x220 [ 330.855112][ C1] NF_HOOK+0x21f/0x3c0 [ 330.859217][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 330.865245][ C1] ? NF_HOOK+0x9e/0x3c0 [ 330.869421][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 330.874041][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 330.880052][ C1] ? ip_local_deliver+0x113/0x190 [ 330.885141][ C1] NF_HOOK+0x336/0x3c0 [ 330.889237][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 330.894369][ C1] ? NF_HOOK+0x9e/0x3c0 [ 330.898542][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 330.903160][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 330.908377][ C1] ? ip_rcv_core+0x88d/0xd50 [ 330.912991][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 330.917512][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 330.922039][ C1] process_backlog+0xa6b/0x18b0 [ 330.926913][ C1] ? process_backlog+0x3de/0x18b0 [ 330.931967][ C1] __napi_poll+0xaa/0x330 [ 330.936326][ C1] net_rx_action+0x61d/0xf50 [ 330.941122][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 330.946287][ C1] ? lapic_next_event+0x11/0x20 [ 330.951169][ C1] handle_softirqs+0x226/0x860 [ 330.955964][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 330.960755][ C1] __irq_exit_rcu+0xcb/0x220 [ 330.965368][ C1] irq_exit_rcu+0x9/0x30 [ 330.969637][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 330.975289][ C1] [ 330.978402][ C1] [ 330.981336][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.987339][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 330.993085][ C1] Code: ac 88 02 e9 83 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b1 23 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 331.012715][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 331.018808][ C1] RAX: 000000000172762d RBX: ffffffff819bbb9c RCX: 8000000000000001 [ 331.026816][ C1] RDX: 0000000000000001 RSI: ffffffff8e414afd RDI: ffffffff8c6da780 [ 331.034813][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 331.042806][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 331.050829][ C1] R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 331.058824][ C1] ? do_idle+0x1cc/0x540 [ 331.063095][ C1] default_idle+0x9/0x20 [ 331.067374][ C1] default_idle_call+0x72/0xb0 [ 331.072155][ C1] do_idle+0x1cc/0x540 [ 331.076235][ C1] ? __pfx_do_idle+0x10/0x10 [ 331.080845][ C1] cpu_startup_entry+0x43/0x60 [ 331.085621][ C1] start_secondary+0x101/0x110 [ 331.090406][ C1] common_startup_64+0x13e/0x157 [ 331.095374][ C1]