[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. 2020/09/11 01:56:33 fuzzer started 2020/09/11 01:56:33 dialing manager at 10.128.0.26:39603 2020/09/11 01:56:34 syscalls: 3168 2020/09/11 01:56:34 code coverage: enabled 2020/09/11 01:56:34 comparison tracing: enabled 2020/09/11 01:56:34 extra coverage: enabled 2020/09/11 01:56:34 setuid sandbox: enabled 2020/09/11 01:56:34 namespace sandbox: enabled 2020/09/11 01:56:34 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/11 01:56:34 fault injection: enabled 2020/09/11 01:56:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/11 01:56:34 net packet injection: enabled 2020/09/11 01:56:34 net device setup: enabled 2020/09/11 01:56:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/11 01:56:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/11 01:56:34 USB emulation: enabled 2020/09/11 01:56:34 hci packet injection: enabled 02:01:11 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) syzkaller login: [ 424.350528][ T8499] IPVS: ftp: loaded support on port[0] = 21 [ 424.783416][ T8499] chnl_net:caif_netlink_parms(): no params data found [ 424.927049][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.935417][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.945012][ T8499] device bridge_slave_0 entered promiscuous mode [ 424.965069][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.973390][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.982933][ T8499] device bridge_slave_1 entered promiscuous mode [ 425.040365][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.060930][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.114434][ T8499] team0: Port device team_slave_0 added [ 425.130928][ T8499] team0: Port device team_slave_1 added [ 425.175749][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.182939][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.209346][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.231699][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.238783][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.266350][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.335265][ T8499] device hsr_slave_0 entered promiscuous mode [ 425.344792][ T8499] device hsr_slave_1 entered promiscuous mode [ 425.675660][ T8499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.733419][ T8499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.759832][ T8499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.799114][ T8499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.098328][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.137417][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.147007][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.173962][ T8499] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.199417][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.209608][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.220153][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.227506][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.241893][ T4870] Bluetooth: hci0: command 0x0409 tx timeout [ 426.248295][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.270221][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 426.281280][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.290744][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.298005][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.330142][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.357608][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.392217][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.402676][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.451669][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.453697][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.469596][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.480253][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.489843][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.499416][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.508979][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.528435][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.595627][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.603400][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.633795][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.693845][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.704169][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.763344][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.774195][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.796961][ T8499] device veth0_vlan entered promiscuous mode [ 426.806026][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.815395][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.849524][ T8499] device veth1_vlan entered promiscuous mode [ 426.921648][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.931128][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.940785][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.950789][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.973630][ T8499] device veth0_macvtap entered promiscuous mode [ 426.997041][ T8499] device veth1_macvtap entered promiscuous mode [ 427.059138][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.067449][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.076997][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.086405][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.096351][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.123125][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.132397][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.143342][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.573263][ T8717] sock: process `syz-executor.0' is using obsolete getsockopt SO_BSDCOMPAT 02:01:16 executing program 0: r0 = socket(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, &(0x7f0000000000)=0x600, 0x4) 02:01:16 executing program 0: bpf$BPF_TASK_FD_QUERY(0xf, 0x0, 0x0) 02:01:16 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x5646, 0x0) [ 428.131874][ T8726] Sensor A: ================= START STATUS ================= [ 428.139527][ T8726] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 428.146406][ T8726] v4l2-ctrls: Sensor A: Vertical Flip: false [ 428.152587][ T8726] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 428.158815][ T8726] v4l2-ctrls: Sensor A: Brightness: 128 [ 428.164526][ T8726] v4l2-ctrls: Sensor A: Contrast: 128 [ 428.169989][ T8726] v4l2-ctrls: Sensor A: Hue: 0 [ 428.175010][ T8726] v4l2-ctrls: Sensor A: Saturation: 128 [ 428.180737][ T8726] Sensor A: ================== END STATUS ================== 02:01:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x89a0, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010101}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, 'wg1\x00'}) [ 428.319153][ C0] hrtimer: interrupt took 68928 ns [ 428.330366][ T8713] Bluetooth: hci0: command 0x041b tx timeout 02:01:17 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt(r0, 0x1, 0x2d, 0x0, &(0x7f0000000040)) 02:01:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x12}) sched_getaffinity(r1, 0x8, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/121) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 02:01:17 executing program 0: perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x84024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff48, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[], 0x430}}, 0x20000000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf9) unshare(0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r3, 0x8, 0x3f}, &(0x7f0000000540)=0xc) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@remote}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x70) r5 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f00000004c0)="f707e69c1ad81ce6542f963424aa340ae412db1a296bee0be617435d977d316821888acc06df8172d153c5f327f0ecfed2ca70d0df0af8f33236bf496ca9f3c641b2365652cd0e01cb7871591c4215239d50", 0x52) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r6, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 429.007093][ C0] sd 0:0:1:0: [sg0] tag#872 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 429.017790][ C0] sd 0:0:1:0: [sg0] tag#872 CDB: Test Unit Ready [ 429.024569][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.034423][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.044265][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.054112][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.063948][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.073798][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.083662][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.093506][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.103346][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.113295][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.123125][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.132979][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.142809][ C0] sd 0:0:1:0: [sg0] tag#872 CDB[c0]: 00 00 00 00 00 00 00 00 02:01:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40110}, 0x24040041) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='sched\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000880)={0x1, 0x4, 0x2}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000240)={{0x1, 0x0, 0x3, 0x3, 'syz0\x00', 0x1}, 0x0, [0x0, 0xfffffffffffffffe, 0x80000000, 0x8563, 0x100000001, 0x8, 0x1, 0x100000001, 0x0, 0x9, 0x6, 0xfffffffffffffffc, 0xff, 0x9e, 0x0, 0xdf5, 0x0, 0xfffffffffffffbff, 0x2, 0x6, 0x21, 0x1, 0x8, 0x7, 0x964, 0x1f, 0x71, 0x5d8, 0x10000, 0x4, 0x6, 0x3, 0x2, 0x5b7, 0x4, 0x800, 0x3, 0xfff, 0xf12, 0x91, 0x5, 0x5, 0x2, 0x6, 0x6, 0x8, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x4, 0x2, 0x81, 0xca9a, 0x8, 0x9, 0x4, 0xffffffffffff0000, 0x100000000, 0xfffffffffffffff8, 0x8, 0xc5, 0x88, 0x6, 0x400, 0x3, 0x1, 0x3, 0xffffffffffffffff, 0x717, 0x9d, 0x0, 0x40, 0xffffffffffffffb4, 0x392c, 0x3, 0x5, 0x3ff, 0xffffffffbf7aca2b, 0x8, 0x2, 0x3, 0xffffffffffff0000, 0x80000000, 0x1ff, 0x38, 0x3d, 0x2, 0x80000000, 0x3, 0x999, 0x3, 0x6, 0x100, 0x7, 0xfc42, 0xc9da, 0x100000000, 0x3, 0xb979, 0x7, 0xfffffffffffffffd, 0x1, 0x4, 0x2, 0x9, 0x70cb, 0xe4b, 0x800, 0x7, 0x8, 0x3558000000, 0x7, 0x7fffffff, 0x7, 0x5, 0x3ff, 0x401, 0xad3, 0x800, 0x2, 0x92, 0x3, 0x10001, 0x800, 0x44d, 0xfffffffffffff801, 0x4c6cbe9b]}) move_pages(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)=[0x1, 0x40, 0x0, 0xfffffffb], &(0x7f0000000080)=[0x0, 0x0], 0x4) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000040)={0x1, "b9"}) syz_usb_disconnect(r0) [ 429.770692][ T8715] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 430.011305][ T8715] usb 1-1: Using ep0 maxpacket: 16 [ 430.132233][ T8715] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 430.143185][ T8715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.154442][ T8715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.164777][ T8715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 430.178004][ T8715] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 430.187319][ T8715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.204612][ T8715] usb 1-1: config 0 descriptor?? [ 430.401136][ T8713] Bluetooth: hci0: command 0x040f tx timeout [ 430.715884][ T8715] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5 [ 430.757480][ T8715] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input6 [ 430.854910][ T8715] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 431.173925][ T8715] usb 1-1: USB disconnect, device number 2 [ 431.192527][ T8749] usb 1-1: string descriptor 0 read error: -19 [ 432.170772][ T8715] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 432.410719][ T8715] usb 1-1: Using ep0 maxpacket: 16 [ 432.483751][ T8713] Bluetooth: hci0: command 0x0419 tx timeout [ 432.531538][ T8715] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 432.542627][ T8715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.553923][ T8715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.563929][ T8715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 432.577040][ T8715] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 432.586273][ T8715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:01:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40110}, 0x24040041) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='sched\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000880)={0x1, 0x4, 0x2}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000240)={{0x1, 0x0, 0x3, 0x3, 'syz0\x00', 0x1}, 0x0, [0x0, 0xfffffffffffffffe, 0x80000000, 0x8563, 0x100000001, 0x8, 0x1, 0x100000001, 0x0, 0x9, 0x6, 0xfffffffffffffffc, 0xff, 0x9e, 0x0, 0xdf5, 0x0, 0xfffffffffffffbff, 0x2, 0x6, 0x21, 0x1, 0x8, 0x7, 0x964, 0x1f, 0x71, 0x5d8, 0x10000, 0x4, 0x6, 0x3, 0x2, 0x5b7, 0x4, 0x800, 0x3, 0xfff, 0xf12, 0x91, 0x5, 0x5, 0x2, 0x6, 0x6, 0x8, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x4, 0x2, 0x81, 0xca9a, 0x8, 0x9, 0x4, 0xffffffffffff0000, 0x100000000, 0xfffffffffffffff8, 0x8, 0xc5, 0x88, 0x6, 0x400, 0x3, 0x1, 0x3, 0xffffffffffffffff, 0x717, 0x9d, 0x0, 0x40, 0xffffffffffffffb4, 0x392c, 0x3, 0x5, 0x3ff, 0xffffffffbf7aca2b, 0x8, 0x2, 0x3, 0xffffffffffff0000, 0x80000000, 0x1ff, 0x38, 0x3d, 0x2, 0x80000000, 0x3, 0x999, 0x3, 0x6, 0x100, 0x7, 0xfc42, 0xc9da, 0x100000000, 0x3, 0xb979, 0x7, 0xfffffffffffffffd, 0x1, 0x4, 0x2, 0x9, 0x70cb, 0xe4b, 0x800, 0x7, 0x8, 0x3558000000, 0x7, 0x7fffffff, 0x7, 0x5, 0x3ff, 0x401, 0xad3, 0x800, 0x2, 0x92, 0x3, 0x10001, 0x800, 0x44d, 0xfffffffffffff801, 0x4c6cbe9b]}) move_pages(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)=[0x1, 0x40, 0x0, 0xfffffffb], &(0x7f0000000080)=[0x0, 0x0], 0x4) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000040)={0x1, "b9"}) syz_usb_disconnect(r0) [ 432.711688][ T8715] usb 1-1: config 0 descriptor?? [ 432.734726][ T8715] usb 1-1: can't set config #0, error -71 [ 432.772097][ T8715] usb 1-1: USB disconnect, device number 3 02:01:21 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xfff8, 0x3, 0x8, 0x80000001}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x13) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'vxcan1\x00'}}, 0x1e) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000140)={0xa95, 0xffffffff, 0x80000001, 0x81, 0x11, 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000180)=0x100000) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r2) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000280)={0xf000, 0x1000, 0x80, 0x60, 0x80}) r4 = syz_open_procfs(r1, &(0x7f0000000380)='uid_map\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RFLUSH(r3, &(0x7f00000004c0)={0x7, 0x6d, 0x1}, 0x7) ioctl$TCSBRKP(r3, 0x5425, 0x6) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x4, 0x2}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000005c0)={0x5, &(0x7f0000000580)=[{0x1, 0x5, 0x6, 0x6}, {0x7ff, 0x2, 0x8, 0x35b}, {0x8, 0x3f, 0x3f}, {0x2, 0xb2, 0x3, 0x8}, {0x7, 0x8, 0xbd, 0x1}]}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x100010, r5, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000600)={{0x8, 0x1}, {0xff, 0x8}, 0x100, 0x7, 0x6}) [ 433.251239][ T8715] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 433.490691][ T8715] usb 1-1: Using ep0 maxpacket: 16 [ 433.614361][ T8715] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 433.625390][ T8715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.636661][ T8715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.646676][ T8715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 433.659813][ T8715] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 433.669033][ T8715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.752462][ T8715] usb 1-1: config 0 descriptor?? [ 434.256467][ T8715] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0002/input/input7 [ 434.304037][ T8715] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0002/input/input8 [ 434.394269][ T8715] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 434.802278][ T8713] usb 1-1: USB disconnect, device number 4 [ 434.818672][ T8834] IPVS: ftp: loaded support on port[0] = 21 [ 434.830575][ T8802] usb 1-1: string descriptor 0 read error: -71 [ 435.386245][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 435.673485][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.680920][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.691242][ T8834] device bridge_slave_0 entered promiscuous mode 02:01:24 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec2e0108191d0411f75e000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000080)={0x14, &(0x7f0000019580)=ANY=[@ANYBLOB="002bc7000000c7227fbd2ec7c3c6bf98989eaa76b3bd4569a3f776727b99e02c7e58ef457309cf519c4fb38bf484ccfd1202236eacb54e6ba76d9b16cfc1bbe5204a544bf0b95ebaa22742335d9fd4dda627c7e0616ab106866cd07e04689888fa26a33e62faddc17c11b8693f356a80d17ab4601361e259b5fa03be6bbf0d898577076c9605ce81fcb75bfad31b46f8618082b49e4eca019dba22aeccbcb1a4dd2ba1687abc4e56daf68abb1a2805dbf4fd3733d70ac35512035d5a5da315f64031695a0197153cdb9a0d9223993c04fafc548887224c7942"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x20, 0x16, 0x44, "81826499589ed3d72f249b2a66ee9946c688881c3f7c1a3c5c51d88b58b53b08abd1d3652b656560d687f6d29478874b976bf6b9571940e18d780aee17494f93e7c2f9e9"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000380)={0x20, 0x0, 0xd2, {0xd0, "ba830984ead1d6176b9f6733a9f56f7bfcdfbd0a108ea0be5bb22fa4c328901bf2800be6ee5b68863203a4a39ddd046224c86177a0d22ceb7f7a84c8670c4247023296bc5a896f3d308b1d0ac276fcf0e304b58cc9016bb9d31edb567e1fbd66ca88780da9de39f714efbdd0578715fb1216167e63de583a790439792ad310bff4f1ecc61de79bc4c86bd0f8e1612f7307f0aa82c37d2cc88c3d99019857970eed4f444f1997c47de280dd2b33c0e9e37c11258adcfd4943ba5487a95765a09bdfab0fd9fe3ddc5d0c1fadff991e8d02"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x87}}) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 435.827663][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.835116][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.844650][ T8834] device bridge_slave_1 entered promiscuous mode [ 435.972828][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.026033][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.091262][ T8834] team0: Port device team_slave_0 added [ 436.107637][ T8834] team0: Port device team_slave_1 added [ 436.133412][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 436.166237][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.173493][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.200628][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.226501][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.234720][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.261080][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.324339][ T8834] device hsr_slave_0 entered promiscuous mode [ 436.336076][ T8834] device hsr_slave_1 entered promiscuous mode [ 436.345664][ T8834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.353542][ T8834] Cannot create hsr debugfs directory [ 436.430931][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 436.552146][ T28] usb 1-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 436.561521][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.585949][ T8715] Bluetooth: hci1: command 0x0409 tx timeout [ 436.594275][ T28] usb 1-1: config 0 descriptor?? [ 436.704553][ T8834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.749805][ T8834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.815160][ T8834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.863172][ T8834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.891454][ T28] usb 1-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state [ 437.201739][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.245511][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.254897][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.281575][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.308617][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.318894][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.329275][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.336619][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.357647][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.384636][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.396358][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.405845][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.413237][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.442946][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.469795][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.495149][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.505814][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.552160][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.562488][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.573100][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.583491][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.593097][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.623137][ T8834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.637307][ T8834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.675893][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.685817][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.712816][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.720713][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.758318][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.831026][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.841629][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.908735][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.918696][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.942261][ T8834] device veth0_vlan entered promiscuous mode [ 437.951739][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.961225][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.995975][ T8834] device veth1_vlan entered promiscuous mode [ 438.077963][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 438.090368][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 438.099787][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.109895][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.132483][ T8834] device veth0_macvtap entered promiscuous mode [ 438.154011][ T8834] device veth1_macvtap entered promiscuous mode [ 438.215225][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 438.225957][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.239581][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.248083][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.259486][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.269039][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.279209][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.307196][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 438.317921][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.333917][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.345194][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.355437][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.582158][ T28] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 438.608920][ T28] usb 1-1: USB disconnect, device number 5 [ 438.668703][ T8712] Bluetooth: hci1: command 0x041b tx timeout 02:01:28 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470000600000000000339078ac141400ac1e00018608212857ea2016042065580000000000000800000086dd080088be942e57bd1cfa826e00000000100000000100000000000000080022ebbf000000002000000002000000000000000000000008006558000000bce414ce7d743b272e00ff73b6df95a52148008ccef9bf3759f9336f256168db580271630dc3b8e61eaa7eb7acfedfc1ad833d30ab90c13c3a51290c085a24ac2b7c944ee407c1aa77e962e50df2f7a7bbdcbfaaf32bcb9754e87ee806d01b266ec2ed4be63f70746e1042297bc2b48a45f87ab7b730762d5bd128ba4ab2ea6200ab9d"], 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x208040) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x2) [ 439.210345][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 439.451618][ T28] usb 1-1: Using ep0 maxpacket: 8 02:01:28 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xd, 0x0, &(0x7f0000012ffc)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040)="cdfe4348d84ef26d949a510d211483fc5dd3dcd8c10854f408c187843b674e04434778a6b6426a9439d7cc11d64d0994a6e751a7826160a563c127b92027771012cb31f8ccc026b6662a73b0116bbfc649d97e8ec9e6840e5fafdb86c7bcdeea63ac6c64b47c59fcffc47a5725234659be907aea3fc13aadf4a35feb8e8459dbe791582bad13681535a53a7afabdad40b8c6e022a7182c8131c1ac75818696c1cd4e04b3ea5930812117bdc37661c1dc606955e79862a49d9f4e550eba2de3576c2593327f46494367a1b226a505e98b6d2e5f160f7ea162f7f34e637c2fc5d278922a8c982008475ca260a5973bb65d32e24e67f0ed", 0xf6, 0x20004800, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) syz_open_dev$vcsa(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 439.571345][ T28] usb 1-1: device descriptor read/all, error -32 [ 439.730259][ T28] usb 1-1: new high-speed USB device number 7 using dummy_hcd 02:01:28 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock2(&(0x7f0000690000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) [ 439.970438][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 440.030877][ T28] usb 1-1: device descriptor read/all, error -71 [ 440.040355][ T28] usb usb1-port1: attempt power cycle 02:01:29 executing program 1: io_setup(0xfffffff9, &(0x7f0000000040)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40302, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r8}, 0x50) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setreuid(0x0, r10) write$FUSE_CREATE_OPEN(r6, &(0x7f00000002c0)={0xa0, 0x0, r8, {{0x4, 0x3, 0x1, 0x1d6780000, 0x3, 0x100, {0x5, 0x983, 0xff, 0x401, 0x1, 0x9, 0x5, 0xc636, 0x1, 0x2000, 0x2, r10, r7, 0x672e, 0x7}}, {0x0, 0x2}}}, 0xa0) setregid(r5, r7) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) io_submit(r0, 0x4, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7fff, 0xffffffffffffffff, &(0x7f0000000080)="cbea377e8c2186dad9046ff1570542c3d013f75b0d0e0f055bfeb666a2ca370c39c5c24e62d990095f795ff9493986c43740ea0e99039a6cb80555ec99651579579baf58dbd9c309e65a72ab0694f35c21a3a14d743f83df9ef2fa900f6b0540fe59bccfeb4f39827d349ab750570449146e1d942c7b6b6c54a322423b41394455bd314da7e5113a6542b364138ecce7a34ff1bb9ff7e71133d7903049873928ba6990e4", 0xa4, 0x4, 0x0, 0x1, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000000200)="8d8b1479d462f885b37e233fabba97edac256945d6f5f15cab6587932a7aca1c1dae50555b5ece7e0613ce3fb3cc54eb8b561ab3fd78eda568c64773a5953989e0f5b913e42d277d7f5c108a670b041f790d8bc51191caca40ac8d24133efe02d94a87ce9361acc99915bcad6cb0a15d40cfe6561355321e7cd200f4", 0x7c, 0xffffffffffffff08, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="b2831c475c26867331599117e042549e5f36797d54c0002e6dd63836c8843e965b9db7f7d5494c0dbb450577589aaa07fdf20c0fa6c177c843635913947624cb35ddef4507f82da758c8239b4d6eba8d704ace0b66fbfc4ca1db79b377e42fd93ae0ab3f8428ec7006ec45d61577ec420c41805a03af5a26a29ab2edd1fa76b2a246b596862d57c3ccb344bdde81f3e1f3171c956449b7609b4061f17b17c82268ffe97c9c36e77dec18b270daed1086eb88ce7276638b6f34f332062fd58a4636c7cb17a2", 0xc5, 0x0, 0x0, 0x2, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x10f1, r4, &(0x7f0000000400)="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", 0xfd, 0x0, 0x0, 0x2}]) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dd7a5640402003494f97010203010902240000000000000904242d9e0244ba0606d811"], 0x0) [ 440.720396][ T8712] Bluetooth: hci1: command 0x040f tx timeout [ 440.962468][ T8713] usb 2-1: new high-speed USB device number 2 using dummy_hcd 02:01:29 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/244, 0xf4}], 0x1, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000030000cf70b8b05de273e7ae0865fa772956ee806f4e7287719f6003fa1c04a3286f86bb6693aaf3f41a05d277600da70500080000000000691d0ce3e8f383ea9a8383dd93a0c2aac2d82ce27857549a0194c6897914a34d4d76d62580ff4d737193d78c30cbe407d626df7d189637d771024cc88df7034c89319e4272fc978a3a10bec4cbcf7e52dc64c168ac", @ANYRES16=r3, @ANYBLOB="00022dbd7000fbdbdf25030000000c000200080000fffd0000000c00078008000100b560baa598b5ad37924079e67c715c08f0c23187ff08c7c6ac13c819d1a919e30ff3948ca491640859d42015f9f4cb2c22d7277a57024dc5adf0be750539c74cc0973789c7f2489a74b67f97bd42c40a939ba59c3aedecc5fbd9e30b81cc37c2d09689ce2609a3a652b83049a4e301d7fc1d6172185fb7f4246dff4a741255bd6647b45a484aa2eb1baaf5930d727e0636c3b3ad6ff981b740eafeb167e6335360af98a922fab35443", @ANYRES32=r2, @ANYBLOB="0c00060000000000000000000c0004000100010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r4 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x40, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040095}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000068005f0b00000040000000000a00000000000000040004000800010001"], 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x9, 0x3, [0x80, 0x81, 0x2]}, &(0x7f0000000600)=0xe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={r6, 0xf800, 0x7}, 0x8) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 441.351929][ T8713] usb 2-1: config 0 has an invalid interface number: 36 but max is -1 [ 441.360383][ T8713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.370846][ T8713] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 441.379860][ T8713] usb 2-1: config 0 has no interface number 0 [ 441.386334][ T8713] usb 2-1: too many endpoints for config 0 interface 36 altsetting 45: 158, using maximum allowed: 30 02:01:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000000904000000030000000921000200012200000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900002003041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x0, 0x3, &(0x7f0000000040)="e91c68") r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 441.397604][ T8713] usb 2-1: config 0 interface 36 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 441.411056][ T8713] usb 2-1: config 0 interface 36 has no altsetting 0 [ 441.722149][ T8713] usb 2-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=97.4f [ 441.731845][ T8713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.740211][ T8713] usb 2-1: Product: syz [ 441.744521][ T8713] usb 2-1: Manufacturer: syz [ 441.749269][ T8713] usb 2-1: SerialNumber: syz [ 441.851975][ T8711] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 441.868153][ T8713] usb 2-1: config 0 descriptor?? [ 442.101313][ T8711] usb 1-1: Using ep0 maxpacket: 16 [ 442.148400][ T8713] hdpvr 2-1:0.36: Could not find bulk-in endpoint [ 442.155219][ T8713] hdpvr: probe of 2-1:0.36 failed with error -12 [ 442.196794][ T8713] usb 2-1: USB disconnect, device number 2 [ 442.242359][ T8711] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 442.255381][ T8711] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 442.264752][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.347440][ T8711] usb 1-1: config 0 descriptor?? [ 442.398006][ T8711] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 442.595348][ T28] usb 1-1: USB disconnect, device number 9 02:01:31 executing program 1: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x6, 0x8, 0x1, 0x3f, 0xfffffffffffffff8, 0x5}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}, @in={0x2, 0x1, @dev}], 0x2c) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast2}], 0x10) readahead(r3, 0xfbd, 0x6) [ 442.800965][ T8712] Bluetooth: hci1: command 0x0419 tx timeout 02:01:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x3]}, 0x8, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x6, 0x1, 0x0, 0x2fb, 0x5, 0x6, 0x1}, &(0x7f00000002c0)=0x9c) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x2}}, 0x10) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, {0x50, "0e73e4f28121d894aff9dd726777a511c6b24b5b2671f13f5c3b1fc44c792933f0cee7e565233e3726ec75dc9775fa7bcc0cbb59f35b2cd652db533c9a9707bdc44a4c36f745fa77f5ddaf591b244cfa"}}, 0x56) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x200, 0x80, 0x0, 'queue1\x00'}) 02:01:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000540)={[0x5, 0x1, 0x8, 0x9, 0x0, 0x4, 0x100, 0xfffffff7, 0x5, 0x2, 0x8, 0xcf9, 0xc7, 0x486c, 0x8001, 0x9, 0xffffffff, 0x81, 0x9, 0x4, 0x9, 0x30, 0x0, 0xa0, 0x263, 0x101, 0x7fff, 0x0, 0x6, 0x200, 0xaa, 0x4, 0x4, 0x4f6, 0x73, 0x6, 0x9, 0x1ff, 0x46, 0x5, 0x590f, 0x37, 0x8, 0x501ca98f, 0x8, 0x6, 0xfffff801, 0x40, 0x2, 0xa364, 0x3, 0x9, 0x4, 0xcae, 0x1, 0x1f, 0x4, 0x3ea1c424, 0xc9, 0x8, 0x7fffffff, 0x9, 0x5bc2, 0x19, 0x1, 0xfe, 0x6, 0x80000000, 0xfd, 0x3c, 0x6, 0x4, 0x8, 0x8, 0xff, 0x9, 0x1, 0x7, 0x800, 0x7, 0x8, 0x3, 0x1, 0x6c, 0x100, 0x0, 0x2, 0x9, 0x2, 0x5, 0x1ff, 0x8, 0x10000, 0x4, 0x1, 0x8, 0x800, 0x20, 0x5, 0x39e4, 0x7, 0xff, 0x2, 0x5, 0xe55, 0x20, 0x60c, 0x1, 0x100, 0x4, 0x400, 0x1f, 0x7, 0x2, 0x5, 0x4802, 0xe7, 0x8, 0x1, 0x0, 0x5, 0x7, 0x800, 0x0, 0x6, 0x81, 0x400, 0x5, 0xfffffff8, 0x1, 0x6, 0x7, 0x6, 0x101, 0x5, 0x6e6, 0x0, 0x3, 0xcc10, 0x9, 0x4, 0xca1, 0x0, 0x6a98, 0x8, 0x9, 0x2cf, 0x6, 0x1, 0xfffffffd, 0xfffffffa, 0x6, 0x8000, 0x8, 0x2, 0xa000, 0xa8a, 0x0, 0x400, 0x6, 0x1f, 0x9, 0xffffffff, 0x7, 0x1f, 0x4, 0x7f, 0x3f, 0x81, 0x0, 0x44b6, 0x2, 0x203, 0x7fff, 0x7ff, 0x7fff, 0x1, 0xa000000, 0x91, 0x1, 0x800, 0x9, 0x80000000, 0x4, 0x2, 0x775, 0x6c, 0x80000001, 0x3, 0x40, 0x5, 0x100, 0x5, 0xdc2, 0x0, 0xfffffffc, 0x7, 0x72, 0x2, 0x8001, 0x7, 0x4, 0x80000000, 0x0, 0xff, 0xaba, 0x40, 0x5, 0x4, 0x40000, 0xffffffff, 0x2, 0x5561bd1, 0x3, 0x4, 0x3, 0xc1c4, 0x20, 0xb5bb, 0x3, 0xff, 0x1, 0x9, 0x8, 0x9, 0x7ff, 0x80000000, 0x5624, 0x80000001, 0x3, 0x20, 0x5, 0x80, 0x7f, 0xae, 0xffff, 0x9, 0xf85a, 0xb0, 0x2, 0x20, 0x5, 0x2, 0x22a, 0x4, 0x8, 0x9, 0x4, 0x5, 0x9, 0x9, 0xf90a, 0x4, 0x101, 0xfffffffe, 0xfffffffe, 0x1, 0x6, 0x100, 0x8001, 0x7ff, 0x4, 0x4, 0x0, 0x1f, 0x9, 0x9, 0x8, 0x88a1, 0x7, 0x5, 0x9, 0x4, 0x7, 0x5625, 0xe5a2, 0x6, 0x2e54, 0x1b, 0x0, 0x3f, 0x4, 0x9, 0x81, 0x1, 0x0, 0x8, 0xffff, 0x162a0338, 0x7fffffff, 0x81, 0x6, 0x7, 0x4, 0x0, 0x7, 0x10000, 0x5, 0x0, 0x0, 0x3f, 0xfffffc01, 0xcb, 0x2ab, 0x4cf, 0x4, 0x7c56, 0x7f, 0x7, 0x400, 0x3, 0x10001, 0x7fff, 0xf39, 0xf00, 0xffff, 0x7, 0x81, 0x35d, 0x7f, 0x4, 0x1f, 0x6, 0x703e, 0x100, 0x2, 0x590e, 0x70f96c09, 0xdf13, 0x3ff, 0x4, 0x6, 0xcee, 0x800, 0x1, 0x8, 0x6, 0x1, 0xf4c, 0x40ae, 0x6, 0x6, 0x4, 0x8, 0xba1, 0x7fff, 0x80000001, 0x4, 0x5, 0xffff, 0x3, 0x3, 0x8000, 0x7, 0x7, 0x1000, 0xffff0993, 0x8001, 0x8, 0x0, 0x5, 0x9, 0x4, 0x1f, 0x7, 0x4, 0xffff, 0xffffffff, 0x3, 0xf506, 0x3f, 0x9, 0x8, 0x5, 0x7ff, 0x8, 0x20, 0xffffe3cb, 0xff, 0x1, 0x3, 0xffffffff, 0x1, 0x1ff, 0x7ff, 0x8, 0xdaa, 0x0, 0xe5a0, 0x10, 0x800, 0x6, 0x1000, 0x5, 0x1, 0x20, 0x1ff, 0x80, 0x7fffffff, 0x200, 0x9aa, 0x7, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x400, 0x8, 0xfffffff7, 0x6, 0x1, 0xffff8001, 0x40, 0x1, 0x2, 0x3, 0x800, 0x1ff800, 0x8000, 0xffff, 0x5, 0x1ff, 0x7fff, 0x9, 0x45d, 0x4, 0x9f, 0x40, 0x7ff, 0x5, 0x1f, 0x9, 0x6, 0x1, 0x1, 0x800, 0x6f, 0x1, 0x1, 0x0, 0x7f, 0x7, 0x3, 0xfffffe16, 0x7, 0x5, 0x80000001, 0x2, 0x800, 0xb5, 0x7ff, 0x8000, 0x0, 0x3, 0xfffffff7, 0x446, 0x10000, 0x2, 0x3, 0x3ff, 0xfb, 0x100, 0x10001, 0xd202, 0x5078c23e, 0x4, 0x400, 0x8001, 0x2, 0x400, 0x5, 0x4b2ddad0, 0x8, 0x2, 0x40, 0x8000, 0x2, 0x1, 0xdffc, 0x3, 0x3, 0x1, 0x6, 0x6, 0x5, 0xfffffffa, 0x7fffffff, 0x1000, 0xd626, 0x9, 0x6eec6fd4, 0xffff, 0x1, 0xc49, 0x1000, 0x8, 0x4, 0x2, 0xffffdcea, 0x3, 0x7fff, 0x1, 0xe0a, 0x0, 0x7, 0x4, 0x193d3be7, 0x8, 0x9, 0x800, 0x6, 0x8001, 0x7, 0x9, 0x0, 0x9, 0x6dd5, 0x100, 0x400, 0xff, 0x2d0, 0x18, 0xf5e, 0x8, 0x8, 0x2, 0x0, 0x0, 0x9, 0x40, 0x2, 0x53d4, 0xfff, 0x0, 0x80, 0x32, 0x4, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x6c, 0x637, 0x3f, 0x101, 0x100, 0x0, 0x240, 0x1ff, 0x4, 0x100, 0x800, 0xfff, 0x8, 0xde, 0x6, 0x400, 0x7fffffff, 0x0, 0x2, 0x50d0, 0x3, 0x7ff, 0xffff83fd, 0x8, 0xffffffff, 0x40, 0x8, 0x8000, 0x2, 0x7fffffff, 0x100, 0xc2, 0x6, 0x9, 0x3, 0x4, 0xd4b, 0x4, 0x5, 0xfffffff8, 0x10000, 0x2, 0xaf82, 0x4, 0x101, 0x6, 0x67, 0xfffffffc, 0x9, 0x7f, 0x8, 0x1, 0x1, 0x401, 0x8, 0x2, 0x1, 0x8, 0x7fff, 0x5, 0xffffffff, 0x8, 0x1f, 0x1, 0x5, 0xaf, 0x4, 0x1, 0x5, 0x5, 0x9c1, 0x8001, 0x1, 0x0, 0xb79, 0x5, 0xfffffffb, 0x7fffffff, 0x100, 0x40, 0x7f, 0x6, 0x4, 0x7, 0x4, 0x5, 0x3, 0x3, 0x0, 0x2, 0x29600cf8, 0x9, 0x9, 0x0, 0xfffffff7, 0x0, 0x100, 0x1f, 0x3, 0x1f, 0xfffffffa, 0x7, 0x8, 0x0, 0x8, 0x5, 0x2, 0x7f, 0x1ff, 0x3ff, 0x8, 0x10001, 0x0, 0x61, 0x3, 0x0, 0xd, 0x7, 0x4, 0x9, 0x3, 0x10001, 0x4, 0x100, 0x7, 0x9, 0x9, 0x5, 0x8, 0x3, 0x0, 0x62, 0x2, 0x7f, 0x3f, 0x47, 0xfffffff8, 0x7f, 0xdfdb, 0x3, 0x80, 0x1000, 0x100, 0x8, 0x7, 0x400, 0x4, 0x8, 0x9, 0x67, 0x0, 0x8, 0xcac, 0x33b, 0xc34, 0x1, 0x800, 0x4, 0x800, 0x1000, 0x9, 0x761545af, 0x3ff, 0x7, 0xff, 0x5, 0x299d, 0x3, 0x3, 0x7ff, 0xbc11, 0x80000000, 0x1f8, 0x8, 0xffffffff, 0x0, 0xfffffc01, 0xfffffffd, 0x9, 0x8, 0x1, 0x9dd6114, 0x2, 0x7, 0x56aa, 0x80000001, 0xffffff00, 0x8, 0x2, 0x1, 0x11a1, 0x2, 0x8, 0x8, 0x6, 0x5, 0x47, 0x2, 0x5dfd45d8, 0x6, 0x3ff, 0x8, 0x80000001, 0x1000, 0x2, 0x100, 0x4, 0x0, 0xff, 0x3f, 0x0, 0x9, 0x800, 0x8, 0x7f, 0x4, 0x100, 0x400, 0x6, 0x7, 0x3f, 0x8, 0x9, 0x9, 0x5, 0x7ce, 0x67, 0x8, 0x63, 0x7, 0x80, 0x7, 0x0, 0x9, 0x101, 0x6, 0x13af, 0x8, 0x9, 0x1, 0x3, 0x81, 0xc5, 0x10000, 0xfffffffd, 0x1, 0x9, 0x3ff, 0x4, 0x2, 0xe2, 0x8001, 0x4d, 0x81, 0x9, 0xff, 0xc1a0, 0xfffffffb, 0x3, 0x8, 0x80000001, 0x8001, 0x200, 0x9, 0x6, 0x5, 0x2969, 0x1f, 0xff, 0x80000001, 0x0, 0x2, 0xfffffffc, 0x7, 0x7, 0x200, 0x7b8, 0x5, 0xff, 0x9fdf, 0x1, 0x4, 0xffffffff, 0x8, 0x5, 0x10001, 0x3, 0x1, 0x5, 0x1, 0x9, 0x3, 0x10000, 0x9288, 0x800, 0xff, 0xf4, 0x84d5, 0x5, 0x217, 0xfffffe00, 0x5, 0x20, 0x5, 0x9, 0x2, 0x200000, 0x400, 0x3, 0x9, 0x2, 0x333, 0x8, 0x8, 0x8, 0x2, 0x7, 0x3, 0x5, 0x1ff, 0x7, 0xe24, 0x4, 0xa3e, 0xc33, 0x7, 0x72a, 0xe3c7, 0x7, 0x0, 0x2, 0x80000001, 0x40, 0x3, 0x8, 0x0, 0x9, 0xb3, 0x0, 0x6, 0xffff, 0x5, 0x1, 0x7fffffff, 0x8, 0x3, 0x1ff, 0x3, 0x2, 0x9, 0x7, 0x6, 0x0, 0x3, 0x1, 0x80, 0x7, 0x90, 0x4, 0xffffffc1, 0x0, 0x3, 0x7, 0x9, 0xffff, 0x67, 0x2, 0x5, 0x1, 0x7ff, 0x1f, 0x4044, 0x8, 0xfffffffd, 0x2, 0xffff, 0x6, 0x7fff, 0x80000000, 0x8, 0x5, 0xa7, 0x3, 0x4, 0x401, 0x40, 0xfff, 0x6, 0x0, 0xfffffff8, 0x6, 0x80d8, 0x40, 0x1, 0x3, 0x1000, 0x0, 0x1, 0x7, 0x4, 0x9, 0x3, 0x3, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9d9, 0x6, 0x0, 0x0, 0x3ff, 0x9, 0xffff, 0x4, 0x10000, 0xbc6, 0x7, 0xffff, 0x7, 0x40, 0x9, 0x3, 0x1, 0x2, 0xa746, 0x4, 0x8, 0x0, 0x1f0, 0x8, 0x4, 0x2c9, 0x0, 0x2, 0x9, 0x5, 0x7, 0x0, 0x9c5, 0x4, 0x401, 0x2, 0x90b, 0xfffffe01, 0x1000, 0x3e, 0x0, 0x61, 0x497, 0x7ff, 0x6, 0x3, 0xfffffffd, 0x4, 0x1, 0x8, 0x9, 0xf59, 0x8, 0x0, 0x70000000, 0x9, 0x4, 0x54000000, 0x3, 0x3, 0x8, 0x2, 0x2, 0x6, 0x1020000, 0x3ff, 0x2, 0x1, 0x3, 0x7, 0x8, 0x2]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6, 0x12, 0x5, 0x200000}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x4000004) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x900, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001900)={&(0x7f0000001580)="4373aa9aeb13ec37452c629114557dd3b3e6a309aca22b4ebdc5a077e75ce7c36d2d89fe962d37ebcdc54142f2c466603c66a535182e76380778c4960792ea8beb6a29664f4c43e3630aa84797f548b317709a104e", &(0x7f0000001600)=""/230, &(0x7f0000001700)="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", &(0x7f0000001800)="dfaba756a12fe4e3d3a8be38d2b785692781a7fd20ccf13a13a1810d078a502b271184410b0197a5ec2169d6ed796560a3fcd0ad793cdb53534a3d1bb4160e7f7a7fcade8dcdab64af2f33c8747a191b55e259cb5a62f877b34b8bcf51007b04d23207bfd5f1c90eddcb759ff4c6db4f2da5233726668148e942b49e9845cd02e75eeda641f5af892033bb066fa9d01ef147b00cb4f29185bdcfa19970eada8e001f0989d4bad69faac730c60bbdcef3028ea4fddbfdc365d9b464ecf60b72e65780174dfc76da0d80ebeb208f8a0c48812d2cdef32ffae0987e3c76e102e3a4dbea3f", 0xc0000000, r5, 0x4}, 0x38) utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x5, 0x7}) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='vlan1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffcd, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xd3, 0x0) [ 443.191424][ T28] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 443.441328][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 443.561910][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.573104][ T28] usb 1-1: New USB device found, idVendor=0403, idProduct=c31c, bcdDevice= 0.04 [ 443.583028][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.683385][ T28] usb 1-1: config 0 descriptor?? [ 443.721829][ T28] hub 1-1:0.0: USB hub found [ 443.940416][ T28] hub 1-1:0.0: 1 port detected 02:01:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x40010, r0, 0x10000000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$caif(r0, &(0x7f00000000c0), 0x18) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000100)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x60600, 0x0) syz_io_uring_setup(0x461b, &(0x7f0000000180)={0x0, 0x56d2, 0x1, 0x2, 0x74, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x17080000, 0x2, 0x1696}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, [0x1d4, 0x0, 0x8, 0x400]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000400)) bind$phonet(r1, &(0x7f00000004c0)={0x23, 0x7, 0xff}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$CHAR_RAW_ZEROOUT(r0, 0x127f, &(0x7f0000000500)={0x97fb, 0x8}) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x2, 0x492500) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000580)={0x3, 0x200, 0x10001}) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000600)={0xc4b, &(0x7f00000005c0)="6caf8e58a6f08eb5ca14bd40f2e1ee4ef38790efcddbf29acc6e53c4255235056eaf5d848e98bb73ade330406ab8fae8"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x10, 0x30, 0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000680)=""/27, 0x2c, 0x1b, 0x1}, 0x20) [ 444.996974][ T8712] usb 1-1: USB disconnect, device number 10 [ 445.010651][ T28] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 445.017669][ T28] hub 1-1:0.0: get_hub_status failed [ 445.771003][ T8712] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 446.011034][ T8712] usb 1-1: Using ep0 maxpacket: 16 [ 446.131808][ T8712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 446.144907][ T8712] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 446.154309][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.200939][ T8712] usb 1-1: config 0 descriptor?? [ 446.247633][ T8712] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 02:01:35 executing program 0: getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0xfffffff7}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000500)={r0, 0xff, 0x4743, 0x1000}, &(0x7f0000000540)=0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xea59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) dup2(r2, r3) bind$netlink(r3, 0x0, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x17, 0x8}}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000200)='wg1\x00', 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, 0x0}, 0x20) [ 446.398947][ T8712] usb 1-1: USB disconnect, device number 11 [ 446.719172][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 446.780773][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.790363][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:01:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x4018, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x0, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b9a66e"}}, 0x0}, 0x0) [ 447.385109][ T9194] IPVS: ftp: loaded support on port[0] = 21 [ 447.950176][ T8711] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 448.341738][ T8711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.347856][ T9194] chnl_net:caif_netlink_parms(): no params data found [ 448.352937][ T8711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.353043][ T8711] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 448.378870][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.495302][ T8711] usb 1-1: config 0 descriptor?? [ 448.629060][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.637185][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.646775][ T9194] device bridge_slave_0 entered promiscuous mode [ 448.667868][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.675215][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.684905][ T9194] device bridge_slave_1 entered promiscuous mode [ 448.736980][ T9194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.754098][ T9194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.861630][ T8711] usbhid 1-1:0.0: can't add hid device: -71 [ 448.867982][ T8711] usbhid: probe of 1-1:0.0 failed with error -71 [ 448.888472][ T9194] team0: Port device team_slave_0 added [ 448.912260][ T8711] usb 1-1: USB disconnect, device number 12 [ 448.961900][ T9194] team0: Port device team_slave_1 added [ 449.085538][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.093374][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.119547][ T9194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.234825][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.242114][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.268413][ T9194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.279780][ T4870] Bluetooth: hci2: command 0x0409 tx timeout [ 449.340635][ T9194] device hsr_slave_0 entered promiscuous mode [ 449.353325][ T9194] device hsr_slave_1 entered promiscuous mode [ 449.363019][ T9194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.371332][ T9194] Cannot create hsr debugfs directory [ 449.402262][ T8711] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 449.662421][ T9194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.683034][ T9194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.703068][ T9194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.722371][ T9194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.781004][ T8711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.792267][ T8711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.802262][ T8711] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 449.811529][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.901522][ T8711] usb 1-1: config 0 descriptor?? 02:01:38 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="91fe", @ANYRES16=0x0], 0x34}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)=""/139, 0x8b}], 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x3, 0x0, 0x0, 0xa44, 0x100, 0x4, 0xffffffe0, 0x6, 0x0, 0x0, 0x3, 0x1, 0x1000, 0x80000001, 0x2, 0xa, 0x800, 0x10001, 0x820e, 0x1, 0x9, 0x54cd, 0x4, 0x7, 0x8, 0x7ff, 0x0, 0x80, 0x0, 0xffffffff]}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={0xffffffffffffffff, &(0x7f00000011c0)="d2", &(0x7f00000031c0)=""/246}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)=0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2ad80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r3, 0x9}}, 0x10) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001200)={{}, 0x0, 0x1d, @unused=[0x4, 0xb3, 0x8, 0x1e], @name="90f261e786be7cde6da96b5c7b69eec6eaf2378c151279dbfd3760f969f8278393b1fef2b58f1be9ba06b639ce88954a7bedc0cf787cf8317217edb7e09f7d1c082e0417cd8609c1144b258773ac386f9e690defd7f41c466a8682c2eb38f686faa64194391406abe99af9c60adbb7d680466d11110bd24d0158966c4014f53f9b398c2930837454754bdc3ec4e664e8916c7269cde63ab3d86f414b800e0a3d41ac13beb20d8e9d4ddb172754b03358911b10bde220bf7e8a71a98c338d4d5fb23baabd5ecc6c2c5d6912557bf33e5bd289f3844528692c552acc75b3144282cba3a4c06eaf10cf995a32abf94d69f64ef3b1412704c123d88a4a10b58d42cb212394ffa6d748a921aaaa6c8b489f1d9ae57dbe1ddc2289095b8e07cf2ff80fc7cb6d1ae49954a932c24571b7587bb0319a64062b1f6f0928b8c8a570d8c780155ac2171cd76ab53522774906834adb42b9b6216e43e159f716de034fb83f8c995a7923929255aaab7f9cfb11a7323b6d5e7b5148d968c1c18a1d66e4236b41a6da5f463339ac246d39ead0c6ab950e512db81e474b867c4597352aa86b8c6b477ce7e3dc08684256cd1a4b91a5e6e686cb1b45bfedae69a2e8bf8023bd6b8318ecfab0d37b3490ebbb35e739062b8b016b9a97b845a6a0f82f22c926e016352af8426dce56e198cf7614697d5c7a2203cf9d97a027f4bae62a58447a929f5f673f5d382b24c39bcd383de21b52e36cac6f6fb36afd5f01e54f530245d1e5c32bf6a64ea9627da1e8a2a8957b051d26bacce2002479035122043317417e5c6eb43886e001dd6362eac5ca3c59f37af83b692c93ec2c0466cfbf20533b70d0dbcda4a13ce0eb214e0362725a6c3d7f2a7fd1e78e360b6e52e10b7806f3382ac5ec6b5030e164c222c878c4ecee7a6ee72f67aad8c32b6a1e3b5af1ca7043c79d3d554586a4510c9bc76a1ea9d7e0da2ad4556cbed7f84fd2c8d98f0683882ce08cc85f555ac59998039cafc95cdb94ecca85fe0bbba5c935e9812775fc2e46c7c48d94ca1b2d991cebd56de6af8bc9a7a19d610f54080aba0711c29478889abccf178d4fa52ec44196fd51adf5adea317a77fc4058eaa24d0c76c4717068b296a7572ccd7fd729bd6af8a5cff5832cb84d1f7aec76138ed3ccb4175baabe87e8c95e8d50b034499dab54af2c65ab74ab62657aaee5c2013ced34d580c99cbf9b1bcf69d36b35d626107a2cab9bda8e6ac04b62be1902752baa926a4289654c47f5ecebcb288ab5a014277d2f5f6fe95b6051717b50506debdb901d34c4b6fa8341f27ec7af2ee0a041b3a4f74ebb1f0a57f377b3c985ab04b1a66e6d62166c74854d79ff512da3fa5165d5a1adb6c3993e0719a82ec2875a23200294edc81d3ac72acc314568ca366fd451ee21923d97f57dacdc15a2a9dfb321ff15523bf6112488803d18bc4b6188225c533a5e6e2187ea5d4c3d5497672a557e746a6131031d7428d0bc8d7b8e08425efd789cf4b30142efe513267722ec8dc1cbaf0cb957b08f8d484258ac5d49e01e95b825e08bb867f62d77a4ee2fc704992abf040adbebc09da5d2a85ece742b17f0d2ac086c0b8b83d3d1ca36bc75647c727d819eba6067990c2097a45dcd5228e647a68b0613d7ed0f452bdbd8a5483ebfaebcde9d93e6327259b4b357b0a5cd77283eaf35ed6e856af3b494b0606107df681e96edaff830589febd4ae672400dbabe140eb456cdcaf0bbf808506ca6cc9d9d87bb0048f38fa0cf1e44fd2e70cf10e5baf4ca171038f5cb0860691619ec131e9307aed3b03502d223d714ad2cad6f62c65ca6791475836678f143a1729e0db673ffbe9e740b712d6ed9b03d91fda50fe4dfc891b80e37585c2650f30b85b2cbe63b941960d0a12ad4263f85a74705679b45af4119fe1514c13b46e0c75971d53e1b0a246b79b5c3ce6852d19b18fd8aa368553e800f69075f66b45399c87598442b0c3375802abfb88a1b41a3371f5aa39ecd9db53101fae6a7012e5aed2a4cf8f5565a1289d438ec8872c5475a46b236740020e9417345af0a08c86259614e7daca055641f0a0cadaa42a8d0da3baf689573912b64a5a14167e40d1668a40f82835d73037053ac06095ac83f9cb39c333db01750b884b79ddbfe0f01cd1a709dff13e1f38b2bd3d50c7b93659ed7d51f4876e65eecdd6d826ee17b8402ced62a0ea18e0919886da61e1790fb9d7969f017e02038f6e799a3110bb056d0da36d381427554cc64b3fbc3239601ed9ee69565936ed7223acbb8cf685f870c6ab4d8ad9e3754fb79e9cad9bd7cb5fb0f58c74699a0092f4f0f4a310dbac8e1cf009ad53f97bb8bc830b03feada33714234d3844f2b21c6b29231d752f75e6e37eaf01e97c66239568cb0cb450317a67f7855a47bc5bce9f4232be908cc67f34a975ff5300a0b366c0932865cba376f7431c53e655882a12bbd7865008a6ff8a2459b0e9bed31ed7e1ff72e4d168b8ae31cbfe3c0dc5407c30169805deeb43a8881760c7c234e8643dffd18e65ad684410563fcc5fc48a2c6752edb129c115c10b133ea4809fbd8eb8aa868d131893eb0e2d4ee657f5909c58075f67ace6d992af124f050d3afe9b605ee904f8c8f67c6952b9da862ae4a976d2464d93d82250c31ee444943a3ea045ea2dd6c94fcf67f21117f26b2bce861e2db1e8b300ab3b1734875e51dbb7a5cbdd8fa6eafa86de1a3e06366f7a5f2d424671122e65ff63d387077ada00bd2f186c8616d0a3e53d5c320af5fb1b4775e27c807ac0c6c898bad935fd8d74f72bdc28b7eca93e5557dedffb533b019743dcb6fe6d9f682bcf7c86cd171dae8bd50e44783a6b3c18f5345e458ac411e33e864b6f85c97f3b5c7dc02164dd3563840bf99ec55a538fafcbf05863d5564c1dbe2e9f5e148a447c2ceb214523a1b42af742f6183e3764d0b8946a78b637e918a3cf29c75f79a3d3e4376326178ffacb5db99c0beba6b11255e3ee517b18c34a153d1ecaf4149a9e864844f8f9bfdda2e6c79a0083ecc5a0a1b8a652a9830815786cd8448e097cbcc993fc30d2fcc454607f0f2af86cd842da18b38a62e0493140fcee4bac5808294b53522d8bbc40aa6dfe79aa734d3fedcd29e13e684d236aeaa5620b0e4069918ae70cee6a4bd3e512901757452076be252f43d0fd2068e72080399398385a46618c32f4cff3be1a4fdfb5ab11d77c4f1db5cac0c93a1ab4f92bb9a7b0511f97a43548c1f0e8a74c0a9200c0b744e633e1d708ddbfacd5a5b6c98a2a8cd9883824cb43590389bd0cb0e7946b028a8287997fd177cd4db470017d92ffbe3dc18929697e294bd50eca1715b3fa301728d49fe27371eb570c2be1f6be7af72e4e3929b6abb085647c0049e7cb83775d59aaf4c514a3bc83ec44f4d478c4c199aed1b3e05c27f16612c0bffffaec5d22f58ae9177a532663981d5bc0e7bb10d1ff88542a1ec0c5607caa902900e614a3d4717c052dd9577066b67db44c0c82969d030cb16e7579a6ed6854177b2c5bdda75ca2a1d9771938d1f113c379cb57f05c8df3ad8d94abb5c634c5b027238e1e16758467c3a26f2e210061c0f1e411103b50d6252fa5c0876933207f428a4b958e7ccaae2b44dd385d89c98a0cc08780dca10c17d49551b6d8b2ce6eb53369e23067171f1e7e5a9acd99c3ae5433d32d5aff0d6696ef255923c2b57ab8fd3cd733f6e86ff3433a2f139516879b7d796b74a594c04751a74edb17257fbb19ce86de1a2982198107d1813b2fe845e00ebbd98596160b374471ade386ebecb7fb266a66661e58125eda7eb58fe9c7596600f5d9c24c3e91e2212ff5d6f8cbd261c2e4556c427b9ad988ab91e8aef4f5fbae415bb9c0fd269834134d7e17b4cff947363ebbb30417f981bc66d42d5c0a36d79971f09ed2ac73dd8d327123ee7137303337a6a637ef75f5e70630b3fbd37b964862c9d7954f5fafd98fffda6b643151fd087ab86397f3e3f154d8838b51cbb5271864d69c958fb01e6f19e0e152e1fd3e02d050e7d2b6ba9ef83207014d6bc42891f34a14ed7219b51d79785a660b507c78b4d8266029400e1ced6f22684e5c6fd72c3030e42be17b1e27164853c1609f567d9d9e06fe7cf492e0afaa48f257bf02e56ddb1d0ac5de3222c354476a90427205688dd885f8e1af6018eaabf5bcb093d0e447a4e86da596cb43e3f7718ed495bc35be29e8ee4c10eb9573c301b0fc0d0b17f300fe5689f478b4326b5354593621ce64b9aa84790821f6db7569a819ea1f17daf57d0b417c66ce19b92c2c6283896af2f9100cfae8f258dffe4336b88761c567fc50f19f7730319a0f775007c567f6b0ecc0c56656434be7edfbce5409bae82ddc3ee04b456c54b0e72e7311c9ba3e4db6ce61a1323293ac39433d8b32af5de592877dee63a85a2a8f6c8239adf8b7ed831b931a17de6a5c6c7646a0539de37de6e793732f9c30f96dfeddd8398657740d1c896b44a834d7cfd39e02ac6d5232f0bdd62fc20096e3132a23bed62204eb36b8d75fa1e077f72775c58f50d89c57b332a8ba97291916278328b39802c32782d3fb02bb1d66c05d63e534695603876577c4067290a7ae4149dfca26902498fad28091b8ddbe9440262cdaef4c2c06a92a586700f30eadd69cd30f7f08782a38d0fcc0d1652d287fba220524d0c7fcd51a3f02d1e1be2a40c1278b24cadc5f4085fb828826242795beb8abc186651d4821d312e46df71be135310d0fbdbeff275dfa472073c85ee6bfc8e402688deac1935b9313552004e46a767431d8e74d5a876e831f17a42ea526b5e403848e064c33f42319f249cf8ebd744e1b0b007b70c9d9e74cb32881c42225f53d0f22ed04bd3af985258a86b8cc12a0d2fc5424e9aa5ccf62c902e44fd753b4b22137f15e506df5d81a3bdd0278f23d4429fffd81f340c5a8064b816583f200dfc833a753634e1a29d265ba82be023cb106f40a86e16b56e7213bf0a19909e2b0936b42a3bfb0b2b37b3106ffd0699fdf58da058ba10c07c819deb9a3934c67df63501c12a575938b1448259a0e8eb7c25a8ef0e4c46750ee6654812cf0be35973cbddc5d970ff0fb3c588f7ae917efcc90ea1fc8cc9bdb34db486d848a4e1b2d2797b37d329f76adef8c828a12224c6e6d5a86fbcd8e44866b341f481b22fed5f640e39e4b27e6b451b1b4a5f52d7a4cf9347ac611994b6764da37ca5d117e080339ddb951151f54a0630fb03734efb07b5dd8bb655f6c2c18d1c4c9f557445030e1e7ac6699bf78bcf49250d11100ad690ebb0df26a85d34277a754481945db28a6e5e515676f61d9ffb97f425c2b86363d41c3ddcf93c25da9358d21c0afa90439e4c75c112e577d054f1bc458e005b47fa2fa7b1e52932a72597bc460ba787baf8d37345ca331e12f053dcb46e46aa38bd2ef0ea831b1f2d5a5887f42f70ec6e2f368a9cad9e1961496cb0bbbe4c5bcd5b8afde28c8cdbad198b6a7c4073cf896944920349bcf42891f095899cd24a552d0847af371dbda180c3dad18471c366930a13bd05f26449675e170a647c9b15681699aceaf0cd87946725ea1ef01b1177d9c99247eb85e7fbc6cfc6a213bc703603bb49936921dfe49cf791c37573d661e6c17f972c14d1db62e406a891d377e3c6f1beab9d71cea99b806b614843b705bee021583781c120565"}) [ 450.203010][ C0] sd 0:0:1:0: [sg0] tag#885 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 450.213587][ C0] sd 0:0:1:0: [sg0] tag#885 CDB: Test Unit Ready [ 450.220336][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.230110][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.239862][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.249634][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.259324][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.269110][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.278891][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.288669][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.298438][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.303009][ T9425] Unknown ioctl 4707 [ 450.308182][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.321776][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.331543][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.341296][ C0] sd 0:0:1:0: [sg0] tag#885 CDB[c0]: 00 00 00 00 00 00 00 00 [ 450.405085][ T9425] IPVS: ftp: loaded support on port[0] = 21 [ 450.487232][ T8711] kye 0003:0458:4018.0003: item fetching failed at offset 4/5 [ 450.495396][ T8711] kye 0003:0458:4018.0003: parse failed [ 450.501385][ T8711] kye: probe of 0003:0458:4018.0003 failed with error -22 [ 450.521021][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.625237][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.634418][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.663220][ T9194] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.756133][ T28] usb 1-1: USB disconnect, device number 13 [ 450.846712][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.857281][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.866633][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.874039][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.002170][ C0] sd 0:0:1:0: [sg0] tag#886 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.012740][ C0] sd 0:0:1:0: [sg0] tag#886 CDB: Test Unit Ready [ 451.019300][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.029133][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.038962][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.048788][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.058620][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.068436][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.078293][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.088062][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.097820][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.107588][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.117362][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.127126][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.136861][ C0] sd 0:0:1:0: [sg0] tag#886 CDB[c0]: 00 00 00 00 00 00 00 00 [ 451.152005][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.161224][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 451.171075][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.180497][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.187721][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.196765][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 451.207777][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 451.211043][ T9426] Unknown ioctl 4707 [ 451.218451][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 451.233530][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 451.240549][ T9453] IPVS: ftp: loaded support on port[0] = 21 [ 451.244630][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.272757][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 451.283149][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.356507][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.366223][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.369729][ T8711] Bluetooth: hci2: command 0x041b tx timeout [ 451.573548][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.583150][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.598512][ T9194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.610051][ T4870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 451.650982][ T1234] tipc: TX() has been purged, node left! 02:01:40 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESDEC], 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="d8dae17bd14a2124b44308041f7a718aaac28b3531fc55e61089d3ea36e8fb7180152fe64cf24c2388ad72b3612881f5b88621a7ecbcadf5790b1150e1b252a367e7c3364b39ee4b9fe0572c1545fc0388e3391bce47a15052f65aef9ff697a264f56892bdd037e62b15c3971db407015d28488dabd68004e23379feef0e62616e5c7d81710f7ed68642ec9b0816f2984a210943959e246ed9c570a73a96f744fc1eba9f02b1429e335216c03c76", 0xae}, {&(0x7f0000000300)="195a67bb497cc2a021e631302455d40401ffb10a7b71934923177f342f4e4d147f90a4540763b97f3b12582209209250e26028cc62841f59678191b3a8298ce55445c58c74d33dc413dbcfc88282266cd19a064945c84eb3a2dddd89476b11565dda5afc7864d9c7a2f026712510c302a12eeae66eaf9bb56ef4a3b5cd22e4c854c61b6d2cf76c5b54f9cfa4a60067f1919ec04c1fa65084aaa7947f0811caa4b9a75111e012b692b989bac54f37e891ea5788bbe5eb9dc1e36a75f8b3495993d34e2eff470ce571f006cffe88e587a785c37408e29d7299d77432665ef6d2ac5ff7a4be28cf9a6588", 0xe9}, {&(0x7f0000000400)="b7b4673b756274b1e6da9e49c0868d60676893a1f1f8bfb5388be040d4a93ed08fa17f2bbe9f40d3c3aa690ce8d9882718d1228fc11f5d6d4fcc29054765381f8a23122aa2991aaab14723e9a4b7a2a8e77278e4ea7f3575a990ef93d7e9c120d4beed2d2e236a33f88b7ad6866e91cba31555457397a9a10367b76c1ee4e608595f9a2d72bad4328e407bccce016d7e23db504c5f6100d2487110ced02efc5fb8faa38a3ce60e", 0xa7}], 0x3}}], 0x1, 0x24000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000b40)={0x9c0000, 0xa9, 0x93d, r0, 0x0, &(0x7f0000000b00)={0xa30901, 0xd, [], @value=0x8001}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000180)) r2 = dup(r1) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000b80)={{r2}, 0x2, 0x7f, 0x8}) write$dsp(0xffffffffffffffff, &(0x7f0000000040)="a538993ba92441fefed654b94de462019fc292abfe28228f232c73f75a6254276e790a013ca5ddf26870f66dce0875d26d02a5e37778318177f905a97d6394882fcb25ad9e4adf363e28d10317ac58648bbcf4fe02d068d5d4ffb1fb1c86b52fd4ed6b7831fe78775f90dc43ffc0d0692047a35f16fd22365628fcb4adfc2cb255c0793174c16576fa0d7f8524ffb21acc64daa2ab274ef4088cbec57ac6c3669fa53e84868eb418798ac9ec6468f4308a4d6d7fecd0e04a3775585901cc0446bb189849d27b8193da2a46261e9f895cf1c58aa5b2c461ecfb5c7fde", 0xdc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x26}, @mac=@broadcast, @multicast1, @rand_addr=0x64010101, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:udev_helper_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) [ 451.751768][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.760560][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.864662][ T9194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.013951][ T4870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.025168][ T4870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.035203][ T4870] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 452.044424][ T4870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.059503][ T4870] usb 1-1: config 0 descriptor?? [ 452.083204][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.092929][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.213009][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.222669][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.268891][ T9194] device veth0_vlan entered promiscuous mode [ 452.283026][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.292074][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 02:01:41 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') pread64(r1, &(0x7f00009f3000), 0xca, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000000)={0x1}) [ 452.355530][ T9194] device veth1_vlan entered promiscuous mode [ 452.369980][ T3739] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 452.460869][ T4870] usbhid 1-1:0.0: can't add hid device: -71 [ 452.467298][ T4870] usbhid: probe of 1-1:0.0 failed with error -71 [ 452.526603][ T4870] usb 1-1: USB disconnect, device number 14 [ 452.640840][ T3739] usb 2-1: device descriptor read/64, error 18 [ 452.678705][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.689421][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.744196][ T9194] device veth0_macvtap entered promiscuous mode [ 452.805864][ T9194] device veth1_macvtap entered promiscuous mode 02:01:41 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = dup(r0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x10) [ 452.970937][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 452.981574][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.991635][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 453.002619][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.016479][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.029620][ T3739] usb 2-1: device descriptor read/64, error 18 [ 453.046521][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 453.056367][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.066380][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.076700][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.300786][ T3739] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 453.440532][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.451097][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.461176][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.471739][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:01:42 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000001800000000000000100100000c000000a800000000000000"], 0x28}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10) [ 453.485694][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.500983][ T4870] Bluetooth: hci2: command 0x040f tx timeout [ 453.522143][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.532938][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.569676][ T3739] usb 2-1: device descriptor read/64, error 18 [ 454.019763][ T3739] usb 2-1: device descriptor read/64, error 18 02:01:42 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000001800000000000000100100000c000000a800000000000000"], 0x28}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10) [ 454.140074][ T3739] usb usb2-port1: attempt power cycle 02:01:43 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000002c0)={0x3, 0x1, 0x17, 0x16, 0xed, &(0x7f0000000740)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000b40)={0x1000, "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"}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:01:43 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000001800000000000000100100000c000000a800000000000000"], 0x28}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10) [ 454.607055][ T1234] tipc: TX() has been purged, node left! [ 454.657434][ T9526] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:01:43 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000001800000000000000100100000c000000a800000000000000"], 0x28}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10) [ 454.851837][ T3739] usb 2-1: new high-speed USB device number 5 using dummy_hcd 02:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', r7, 0x29, 0x2, 0xcb, 0x1, 0x8, @dev={0xfe, 0x80, [], 0x10}, @remote, 0x40, 0x700, 0x1, 0xfffffffc}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}, @IFA_LOCAL={0x14, 0x2, @dev}]}, 0x40}}, 0x0) 02:01:43 executing program 1: ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xfc4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0x18, "862d359f1b5d9ca7724198b6f7d5509f342a84cf361bfce1"}, &(0x7f0000000200)=0x20) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x111, 0x5, &(0x7f0000001580)="7599f77364d6a96e3b44d27866d98f0195490a839df2204a8281541d6d93ac532e8a419ca88324c80e80ed7b4678a95bd5989bbfd9e9f587f971643f5d17238f0c7f83503790a3cd26bcae4655f145d42133786ceff9eb1b6af91dffa2096b01192d0f8419445a8335657ef29947e4bbde565a7ea60d99ed7cd5a8d3916df4eda4c94a950ff737f133705bb380a1d01d8e340e970b901d85637419bc0b5df43dfecc95145967d60a4807d327dd111c51fe5f55552ed5de7ba5682400c9c5ba19555cf9d7095da8835226ecdb19507b532e1fc7c18cdf95d12c0e0224b8afa9c2ca494102fb1c4d4fd9b55d7baed0fa3027f3325d4f906e272efe736062c0e308701364e509146118b3cac32e5766402423a4406201ab387aec56879ac3df8bc9181ad2d5e00a7513e5a9f178762f12d9216f2fc5f540af323c10617ccbfa26cab630fd41686a5283d3fc7b5d4a6c0e99559902868ca3ca178f27b1252ca90bfaaf1fdbd2ed96d5bd5a4d135afd4349c0078f65150f42a8bb35e4b6a2ccad0f420fa089d9b6ad6c14b7e55a1dabc094a4832210679b87132e926935ea4482ba88a7e8e677ba2888a35a835ff016399530371f596b0c5e1446df06eba655f278a91f3eef4a1ad86818c347587f3c7ba2df5c33fa64e102f3e8da1372086e5f7f3b61fcee48530eca51b228906901f6cebe1f3e4329a0beaf6d27ec82b09e5ae92ed0d632b22b9363815dab0b2c4c67478813fca1ab274d62cc5529f3a74835292d87ee588da08df12112058a1e4ac9ef846ced06c53ab5cd8a253c4143e28977540aa04a15c8b9232ecde3abd714bfd6ce3f948fa436ef96778b37c6b508f66684324d0d675d3512055c61a017ffbcaaa144b9a379c40ee1583fae6b80edaa96774b492c0d99330ab73b225ffd1a7508e5daaa5f62c2ab3466861b25b834ce50a124077248f83e543aeb40af8adb8957dbbb1f54d570a643f29c788201fa823bae5d47a373af66e24aab5df884ed3aad56007abd9557b3c5e4ed6c1aeaed316847a9a6c8095c19f3275935c6f3aa3e7c0e707094fad970932ec6cce49bc6f533cc8ab5539d9076c9f875fb135fc1baabe88d262b6188090f08ea81abd4f106819ce40dd4aa09d0d0b4f241050cf8c389584d4eafe46c365f1d30152a42cef48cb9ceadef01e18704a63f83b8f013ddba9e483cfd99a536e1512c40430e98f7c747e1a47999b898084a424e661e1c491b8a2873af0e1296b0ff5ce4fb64f68b86c3bb178e83833a22c6013027e1afff83b7e77a0e214e486547c79d9f2bf8403fbf16d8ecc8cd152e076301786f244267a53b268dffecc256e3629d66dc33e68406fb96f2426c46649d3fb0d280454442433ec35cb3b55722172e6200c532fd7dbdf78a537343c4c87dca488ac5aa82d6ec69ba0d6390704785908e1f0b7664c624"}) pwritev(r1, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x1000000000000257, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000340)=""/4096) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 02:01:44 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000001800000000000000100100000c000000a800000000000000"], 0x28}}], 0x2, 0x0) [ 455.201221][ T3739] usb 2-1: device descriptor read/8, error -71 [ 455.298789][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 455.410591][ T3739] usb 2-1: device descriptor read/8, error -71 [ 455.433536][ T9541] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 455.502386][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 455.520542][ T8713] Bluetooth: hci2: command 0x0419 tx timeout [ 455.538328][ T9545] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 02:01:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/181, 0xb5}], 0x3, &(0x7f0000000300)=""/24, 0x18}, 0x2) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x22, {0x22, 0x0, "eb2b2005001f5b2a03b2538fecba8ebeb1600ab5c5b31fc6c16e3d012890917f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:01:44 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) 02:01:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x206a64, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xb5e, 0x0, 0x740000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94, 0x73d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r3, 0x0, 0x2a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRESHEX=r0], 0x131) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/41}, 0x20) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x65142, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fallocate(r4, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 456.201284][ T3739] usb 2-1: new high-speed USB device number 6 using dummy_hcd 02:01:45 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) 02:01:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ftruncate(0xffffffffffffffff, 0x3) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x80000000, 0x8000}) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0x54d, 0x2, {0x0, 0x0, 0x8001, 0x7, 0x8001}, 0x7}) tgkill(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 456.290858][ T3739] usb 2-1: Using ep0 maxpacket: 8 [ 456.410657][ T3739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.421809][ T3739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.431924][ T3739] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 456.441288][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.529340][ T3739] usb 2-1: config 0 descriptor?? [ 456.548739][ T29] audit: type=1800 audit(1599789705.304:2): pid=9564 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15732 res=0 02:01:45 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f00000000c0)={"0dea86431adb87b97fb935fb7a560d8a271470f8ee9ac4ea1d67780323e4", 0x8001, 0x2, 0x2, [0x8, 0x7f, 0x6, 0x1921, 0x2, 0x7, 0x10000, 0x4, 0x7, 0x9, 0x3, 0x4, 0x1ff, 0x80000001, 0x4, 0x2, 0x1f, 0x1ff]}) [ 456.734839][ T29] audit: type=1800 audit(1599789705.494:3): pid=9568 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15734 res=0 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2a}, @local, r6}, 0xc) r7 = dup(r0) getsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000140), &(0x7f0000000040)=0x7) [ 457.013409][ T3739] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x2 [ 457.021360][ T3739] hid-picolcd 0003:04D8:F002.0004: ignoring exceeding usage max 02:01:45 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 457.146148][ T3739] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf3 found [ 457.154242][ T3739] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf4 found [ 457.215847][ T8712] usb 2-1: USB disconnect, device number 6 [ 457.246773][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.401243][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:01:46 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000080)={0x0, 0x6, 0x200d, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) 02:01:46 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:46 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f0000001080)=""/246) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x40}, 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 458.030420][ T8712] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 458.271059][ T8712] usb 2-1: Using ep0 maxpacket: 8 [ 458.391195][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.402482][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.412620][ T8712] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 458.421942][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.548298][ T8712] usb 2-1: config 0 descriptor?? 02:01:47 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x5, 0x200, 0xffffffffffff7fff}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00!\x00', @ANYBLOB="06012dbd7000ffdbdf250f0000003c0001800700060072720000080009006000000008000600736564000800090003000000080005000300000008000b0073697000060004004e2200000800060001000000"], 0x58}}, 0x4000080) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000240)={0x0, 0x80000000, 0x596, [], &(0x7f0000000180)=0x1f}) restart_syscall() 02:01:47 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0x81420000a77, 0x0) write$UHID_CREATE2(r5, &(0x7f00000002c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')'}}, 0x119) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000140)=0x1) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0x78) [ 458.991609][ T8712] usbhid 2-1:0.0: can't add hid device: -71 [ 458.997963][ T8712] usbhid: probe of 2-1:0.0 failed with error -71 [ 459.029013][ T8712] usb 2-1: USB disconnect, device number 7 [ 459.084925][ T8713] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 459.093755][ T8713] hid-generic: probe of 0000:0000:0000.0005 failed with error -22 02:01:47 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 459.193078][ T9632] IPVS: ftp: loaded support on port[0] = 21 [ 459.332374][ T8713] hid-generic 0000:0000:0000.0006: item fetching failed at offset 0/1 [ 459.341250][ T8713] hid-generic: probe of 0000:0000:0000.0006 failed with error -22 02:01:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x42082, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = dup(r0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x10000) dup2(r1, r2) [ 459.471205][ T9659] IPVS: ftp: loaded support on port[0] = 21 02:01:48 executing program 2: syz_emit_ethernet(0xb6, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x80, 0x3a, 0xff, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c000005dc7911d2acdea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80503"}, {0x0, 0x2, "84f0da52ef2457131396805037f55924f4dffba7"}]}}}}}}, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x1) 02:01:48 executing program 0: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000140)=""/182) 02:01:48 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0028002d00090001dc8accdccc1e3f05448101567d0fa3fc51219700ae657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r5, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000080)=0x3) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000900000000020d0000052406000105240000000d240f0100000000008000000006241a00100008241c0000000004090581030004280000090401000002064c4ef55fdb3967023ca79f86"], 0x0) quotactl(0x4, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)="9275d0534da6bac70d68b6379949c1aeaa7476d3bb3a0496ebf81ba0eff513eb2443a97fc7d954e6af1309f26d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="6c0bec3d448d", @mac=@dev={[], 0x2f}, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, 0x0, 0xffffffff}}}, {{@arp={@multicast1, @remote, 0xff, 0x0, 0x0, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7d, 0xda1, 0x5, 0x1a2a, 0x7, 0x2, '\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x44}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="26f3a46e8334", @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x28}, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="cde7698ec980", @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) [ 460.264741][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.299313][ T9696] input: syz1 as /devices/virtual/input/input9 02:01:49 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 460.414498][ T9708] input: syz1 as /devices/virtual/input/input10 02:01:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000001900)={0x1398, 0x15, 0x6, 0x201, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x5}, [@nested={0x108, 0x2d, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r3}, @typed={0xf3, 0x70, 0x0, 0x0, @binary="c89b19d6112f9d17ad8960c6fd3a0afc10163bf7015fb443bb245a2f13544ac4e4c0b331391b2c388abf6011f64e8db6431c70d13fc439d653806a55defd9b5d7481e95a8c355fa3bfea2a8d012dce0dee0e5535cf2070346258f5d2ade3aaa5648650e8c8dd511341617d7e9e893ecb3e67736925afe3427fa4c6703cd28181df88cac4427f2b124706e0c4d2a1770a5fe24b5bcc98a013250d099753fc6142354b0e20dc762e062f9e218c3848651826febc5f1651fa3a6837ad04717644eeaf1a68c93802a0852b797a6b41e9e5746fe9c30935b530d9b3b6a271a1ad49f032d9edd08a79b09f605ccefcd3141c"}]}, @nested={0x18, 0x13, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @str='+*-o::+*-,.,(!\x11\x00'}]}, @nested={0x1cc, 0x10, 0x0, 0x1, [@generic, @generic="ab05dc5e04416bd6302350a1a7acc03a4330e4249d287873260c5788a31062ee4c70e5a9dcbec4ec85c677d2be146184432cb5bb36f18e3f3e8725d377bc417793f5792fa3365cd27297673dfca967e5bdd69d6cc887925d5be2a9bb073b35b80d5da98f44bd253b281e1a8226e433cc282bccca95a1d9fdc6223ca00f822dd421b0a08e8aeca9957199a78ab9c01ea38cb9c3643ee9d9bf33c5fdfbe33edf8cbc8b2f339cccbcd2a03715a01e1c3dc7c353f85e72c651a8", @generic="b0c4d2cf9884b6d841c65af37e1e9e8790606c42dc30e9cf91503b773a3de01f798900b7d68bd38685491d5e2b3ca77b353d971cc51cfa1c24736d82f4d15e4b8f54d9c204ae04fcbb3f5505cd6319bb1d28054b5b81afaa0065af22929be35994ff787d6712eb76f9b3dbf814b46ad8845adcfd17aeb7802cc68c2875d5538376beb3accde227a11d87b1ae39d03511dbe34611126efbb9a2498e43203d440dca2a2617e9a210554ea607d97db488f3ddc3c29a0dcbf1ca1016d692d86725c683d83bae7e1dfbe5dabe2b26af91543e052ae3245fadd7872c933a9c91b0e11d8e995aee8117bc07b2b1f5156f4028f1c33b99d775b4b071bf369833", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@remote}]}, @generic="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", @generic="85d5948d1bc989d3a131d9b5d78b05b0afe71a7084e60ea12e6274304eee4db62b9581f42cc53fb5989528f4e59003fb674e137398f3d79be377f984506c91e571ce1c2c3436196d1f7550423c3556620a3b001e371bdbc5811f6bf0ef742d59f46689b7e68cfec72b69d0dfc7a3f79454a6f097508d12019917182749a1588314e330470110f191ee3e62ac8699342af5d4ca2fc9"]}, 0x1398}, 0x1, 0x0, 0x0, 0x811}, 0x8010) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000002c0)={0x3, 0x0, 0x13, 0x40016, 0x0, 0x0}) openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000001000200", @ANYRES32=0x0, @ANYBLOB="020004", @ANYRES64], 0x64, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:01:49 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 460.702005][ T3739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 460.950138][ T3739] usb 3-1: Using ep0 maxpacket: 32 [ 461.070971][ T3739] usb 3-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 461.081697][ T3739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.090914][ T3739] usb 3-1: config 1 has no interface number 0 02:01:49 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000100005070000f9bbc7e4b627ef40354a", @ANYRES32=0x0, @ANYBLOB="251002fffff000103400120009000100766c616e000001002400020006000100040000000c00020000000000000800000c00"], 0x3}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0008"], 0x1}}, 0x0) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x84ffe0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xdacd}, 0xc) [ 461.260124][ T3739] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.269580][ T3739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.277718][ T3739] usb 3-1: Product: syz [ 461.282288][ T3739] usb 3-1: Manufacturer: syz [ 461.287037][ T3739] usb 3-1: SerialNumber: syz 02:01:50 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 461.588253][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.700885][ T3739] usb 3-1: USB disconnect, device number 2 02:01:50 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 462.162143][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 02:01:51 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:01:51 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0x38, 0x7a, 0x20, 0xcf3, 0x9374, 0x79, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x60, 0xc7, 0x64, 0x0, [], [{{0x9, 0x5, 0x4, 0x3}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2cf7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1c2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x814}, 0x20008800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 462.469323][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd 02:01:51 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 462.710848][ T5] usb 3-1: Using ep0 maxpacket: 32 02:01:51 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 462.832473][ T5] usb 3-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 462.843147][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.852434][ T5] usb 3-1: config 1 has no interface number 0 [ 462.859815][ T8712] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 463.021198][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.030755][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.039751][ T5] usb 3-1: Product: syz [ 463.044142][ T5] usb 3-1: Manufacturer: syz [ 463.049008][ T5] usb 3-1: SerialNumber: syz [ 463.099503][ T8712] usb 2-1: Using ep0 maxpacket: 32 [ 463.220331][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 463.231514][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 463.241970][ T8712] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 0.79 [ 463.251416][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.317086][ T8712] usb 2-1: config 0 descriptor?? 02:01:52 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x30, &(0x7f0000000000), 0x20a154cc) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f00000000c0)) 02:01:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 463.489111][ T5] usb 3-1: USB disconnect, device number 3 [ 463.579659][ T8712] ath6kl: Failed to submit usb control message: -71 [ 463.586403][ T8712] ath6kl: unable to send the bmi data to the device: -71 [ 463.593724][ T8712] ath6kl: Unable to send get target info: -71 02:01:52 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 463.659390][ T8712] ath6kl: Failed to init ath6kl core: -71 [ 463.684875][ T8712] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 463.754674][ T8712] usb 2-1: USB disconnect, device number 8 02:01:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigreturn() capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0xc31, 0xcf, 0x1, 0x8000, 0x51b, 0x8}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='lo:|T\xdcD\xd2\xaf>V\x96o\xd6Q\xa8P\xb1y\xa9\xc8J\x15`\xd2\x8d\x00\x00\x19\xd5Q:\x8f\xecb6\xd6\xd7A\x91\xed?\x00\xeb\xf0\x03\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3t') 02:01:52 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 02:01:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0x80}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000180)={0xd4, 0x2, 0x0, 0x80000001, "c43e9f585d4f578b8cc9b87ed4640e917a110f5274c5eaa64f9c2b064621637a960b088a93b0fd2668fdf33962aab255401de50bf3c16dcc4487953daf408a300945369a85e8c226549ce8609726376e1d3fc56a591135ddb9794627e5d0f1fee906a0c1db612a7564672ea3cae50ed64baabc86692ad8f6d1be5b87e64ac5e8ced42fca64194a04a806bf8e772d44ef1e163fb10b4ec054fce8995001ee7534301c66de7c65b1048617d0d5460ad98aff1971a149e6c12a5c0f88bb"}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) shmdt(0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x9, 0x5c, 0x1}) prctl$PR_GET_KEEPCAPS(0x7) 02:01:53 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 464.350013][ T8712] usb 2-1: new high-speed USB device number 9 using dummy_hcd 02:01:53 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) [ 464.590097][ T8712] usb 2-1: Using ep0 maxpacket: 32 [ 464.710194][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 464.721362][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 464.731414][ T8712] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 0.79 [ 464.740720][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.858575][ T8712] usb 2-1: config 0 descriptor?? 02:01:53 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) [ 465.129519][ T8712] ath6kl: Failed to submit usb control message: -71 [ 465.136329][ T8712] ath6kl: unable to send the bmi data to the device: -71 [ 465.143642][ T8712] ath6kl: Unable to send get target info: -71 [ 465.227590][ T8712] ath6kl: Failed to init ath6kl core: -71 [ 465.244354][ T8712] ath6kl_usb: probe of 2-1:0.0 failed with error -71 02:01:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1218000054f22240c410f698f2380000000309021200010000000009040000002c26a1006c0582f4e345a78ba9eb7e294fe45f2eb4f80b90c19ed1f5ab34206ba53542d0a0efa9c4010cfb734d08813c4b14004e0b4c6f75ec90193be0ef2b4654821c86c9e8ad503413520700dcb8e6395c23647823084159207d598efc17"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x800, 0x1a, 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00000d00000099040000384565f82ee74efd25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) [ 465.314783][ T8712] usb 2-1: USB disconnect, device number 9 02:01:54 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 02:01:54 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) [ 465.690282][ T8715] usb 3-1: new high-speed USB device number 4 using dummy_hcd 02:01:54 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x210000, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0xee00]) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setns(0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000", @ANYRES16=r7, @ANYBLOB="100025bd7000fddbdf250b0000000800060000000000080004000600000008000600000100001c000180080009007b0000000800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="09dc3a9682f6ee1b0000009c7e16d82646a001000000f66af1dff39826ed81d0e10b08885ebb1347c0f02cb91cf3085ab2e593f2aafd5a77d52f6e6f967413fdcadb000000000040000000295bf4bd17964d", @ANYRES16=r7, @ANYBLOB="10002cbd7000fcdbdf25060000001800018014000300ff0200000000000000000000000000012400028006000b000200000006000b000200000008000400a500000008000500ffffff7f6800018008000b0073697000060002003a0000000800050004000000060002003a000000060004004e220000060004004e2300000c0007000000000009000000090006006c626c63000000000800080072ad000014000300000000000000000000000000000000000800050004000000"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc4d0000d04aa7c6beda9f45e95c913e5c80badf95d685fe8bc10ac7c6aca577e9b7a672e6e1eab856f18563d30f2964028a9863c57488e56f2c0e29fe688ff824c835f32ae99d56d7882581ac0cb6847f0a4234934bf87d341bd434e50e1459ed60d013a62d3409eb4b2a5ad1976f1aaf07e83422c128b54dae22", @ANYRES16=r7, @ANYBLOB="200025bd7000fbdbdf250b000000080006007f0000004c00028006000f0011ff000005000d000000000008000800ffffff7f05000d000000000005000d000000000008000500080000000800080007000000080008000600000008000600ffffffff4c00018006000100020000000600010002000000080005000000000014000300640101000000000000000000000000000800080003000000060001000a0000000c00070006000000020000000800040040000000"], 0xbc}, 0x1, 0x0, 0x0, 0x20080010}, 0x40) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={0x0, 0xfffff25c}, 0x8) preadv(r8, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) [ 465.959240][ T8715] usb 3-1: device descriptor read/64, error 18 02:01:54 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 02:01:55 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1d, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0420eb00000000000001ff75192e7f0008000000b4f1a0930136388520a54a95a0a13f4ada47f101d4a9e0a1e40656b37c0d183212629269c8c45420de69b152e25d2d06", @ANYRESHEX, @ANYBLOB="399fc432501c02775bd806cc7f62084837782cffabc0e32c13907ac570eb5fa1b3dc68861f8493c417183afe17a296a959863ec98d11a711726487356dd00a42a80077f17c4870ed1bef3997e12ef397549cb96311721c74c49ea98ceb7739f30cfecfa3426443fa94ec713b63e53d912283a65f0aa8f68771ba3c9b941a5306ab29e7b4e199854eafbb3719", @ANYBLOB="be73183c9defd710df1acdf7a27d7dbc8dd6b2e33626890abe84480e", @ANYRES32=r0]) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x8000) recvmmsg(r5, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000140)="ea", 0x1, 0x0, 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) [ 466.349132][ T8715] usb 3-1: device descriptor read/64, error 18 02:01:55 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) [ 466.620777][ T8715] usb 3-1: new high-speed USB device number 5 using dummy_hcd 02:01:55 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1c00}], 0xe, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x400000, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r5, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x5423, 0x0) 02:01:55 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)}], 0x2, 0x0, 0x0) [ 466.890562][ T8715] usb 3-1: device descriptor read/64, error 18 [ 466.913555][ T9850] IPVS: ftp: loaded support on port[0] = 21 02:01:55 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)}], 0x2, 0x0, 0x0) [ 467.319112][ T8715] usb 3-1: device descriptor read/64, error 18 [ 467.443884][ T8715] usb usb3-port1: attempt power cycle 02:01:56 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)}], 0x2, 0x0, 0x0) 02:01:56 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="b5", 0x1}], 0x1, 0x0, 0x0) [ 468.166208][ T8715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 468.270962][ T9850] IPVS: ftp: loaded support on port[0] = 21 [ 468.339649][ T8715] usb 3-1: device descriptor read/8, error -61 02:01:57 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="b5", 0x1}], 0x1, 0x0, 0x0) [ 468.708970][ T8715] usb 3-1: device descriptor read/8, error -71 [ 468.749186][ T1315] tipc: TX() has been purged, node left! 02:01:57 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendto(r0, &(0x7f0000000080)="f5", 0x1, 0x0, &(0x7f0000000100)=@generic={0xa, "6a64c974246412bdb7e4937f9442856bb59c929ee4a4d8ed023d4fb8c157aefe03000000000000006c1215687e3a3e7cac9293f2c6dffd1fb0bca5812c0a16348217ea1350bab263aea5aec5295a7daf06e02021d0ce17fa039ec38c86840a6dabc8024e80511492c3c476ff0173c6ec799414bcb3331ed847386283e44a"}, 0x80) listen(r0, 0xfc0004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0xfd7e, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000180)=0x2) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x80000000, 0x8, 0xfffffffe, 0x6, 0x378}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000001380)={r7, 0x9, 0x80}, 0x8) r8 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz'}, &(0x7f00000002c0)='\"', 0x1, r6) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={'cbcmac(serpent)\x00'}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={{0x3, 0x0, @reserved="7cc0e67d506e7e18aabbe1f8826fa41000a0d2e795e0b708f7097330ed27e449"}, 0x1000, r5, [], "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"}) 02:01:58 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="b5", 0x1}], 0x1, 0x0, 0x0) 02:01:58 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 470.000630][ T9925] FAULT_INJECTION: forcing a failure. [ 470.000630][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 470.014011][ T9925] CPU: 0 PID: 9925 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 470.022671][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.032793][ T9925] Call Trace: [ 470.036287][ T9925] dump_stack+0x21c/0x280 [ 470.040777][ T9925] should_fail+0x8b7/0x9e0 [ 470.045316][ T9925] should_fail_usercopy+0x39/0x40 [ 470.050492][ T9925] _copy_from_user+0x62/0x330 [ 470.055308][ T9925] ? kmsan_set_origin_checked+0x95/0xf0 [ 470.061001][ T9925] rw_copy_check_uvector+0x372/0x8c0 [ 470.066405][ T9925] ? __msan_poison_alloca+0xf0/0x120 [ 470.071874][ T9925] import_iovec+0x18a/0x6b0 [ 470.076539][ T9925] do_pwritev+0x3ac/0x910 [ 470.080986][ T9925] ? fput+0x82/0x320 [ 470.084987][ T9925] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.090894][ T9925] ? kmsan_get_metadata+0x116/0x180 [ 470.096200][ T9925] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.102111][ T9925] __se_sys_pwritev+0xc6/0xe0 [ 470.106889][ T9925] __x64_sys_pwritev+0x62/0x80 [ 470.111823][ T9925] do_syscall_64+0xad/0x160 [ 470.116467][ T9925] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 470.122431][ T9925] RIP: 0033:0x45d5b9 [ 470.126368][ T9925] Code: Bad RIP value. [ 470.130496][ T9925] RSP: 002b:00007f7f25782c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 470.138994][ T9925] RAX: ffffffffffffffda RBX: 0000000000025f40 RCX: 000000000045d5b9 02:01:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005a00010100ffffbf84488cc9656513150c0004c047a5abb0704eda92c838ce90e2fcc2930794963ba4baf48ecbff3833f5b19143cb24d859b61bf406243ac173cf3859618c2bd47b9764b926d436cd5b18a72b4d331c139ad28b605b0f1eeb73948c633f38df5ae08f76cd437c2ae58658ca35b5101104b48eaf28e4f4c956857878358ad8bbf40ca22bad5b974b99d687316d080605c131762af37092c6baab9183e128e275a4c6226e7e34d967b5dd61ba410e3c54cd188a8a1384acb5c15733d7c3"], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x501000, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x3ffd}, 0x10) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 470.147050][ T9925] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 470.155109][ T9925] RBP: 00007f7f25782ca0 R08: 0000000000000000 R09: 0000000000000000 [ 470.163155][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.171288][ T9925] R13: 000000000169fb6f R14: 00007f7f257839c0 R15: 000000000118cf4c 02:01:59 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 470.684600][ T9930] FAULT_INJECTION: forcing a failure. [ 470.684600][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.697990][ T9930] CPU: 0 PID: 9930 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 470.706669][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.716787][ T9930] Call Trace: [ 470.720191][ T9930] dump_stack+0x21c/0x280 [ 470.724635][ T9930] should_fail+0x8b7/0x9e0 [ 470.729183][ T9930] should_fail_usercopy+0x39/0x40 [ 470.734326][ T9930] _copy_from_user+0x62/0x330 [ 470.739239][ T9930] memdup_user+0x142/0x230 [ 470.743832][ T9930] nvram_misc_write+0x215/0x350 [ 470.748793][ T9930] ? nvram_misc_read+0x5e0/0x5e0 [ 470.753823][ T9930] do_iter_write+0x9b1/0x1020 [ 470.758623][ T9930] do_pwritev+0x581/0x910 [ 470.763082][ T9930] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.768984][ T9930] ? kmsan_get_metadata+0x116/0x180 [ 470.774317][ T9930] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.780225][ T9930] __se_sys_pwritev+0xc6/0xe0 [ 470.784998][ T9930] __x64_sys_pwritev+0x62/0x80 [ 470.789876][ T9930] do_syscall_64+0xad/0x160 [ 470.794479][ T9930] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 470.800442][ T9930] RIP: 0033:0x45d5b9 [ 470.804376][ T9930] Code: Bad RIP value. [ 470.808502][ T9930] RSP: 002b:00007f7f25782c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 470.817005][ T9930] RAX: ffffffffffffffda RBX: 0000000000025f40 RCX: 000000000045d5b9 [ 470.825062][ T9930] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 02:01:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x74}}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20040) tee(r1, r0, 0x5, 0x1) [ 470.833108][ T9930] RBP: 00007f7f25782ca0 R08: 0000000000000000 R09: 0000000000000000 [ 470.841153][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.849201][ T9930] R13: 000000000169fb6f R14: 00007f7f257839c0 R15: 000000000118cf4c 02:02:00 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24004011}, 0x10048003) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYBLOB="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"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', r6}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x0, 0x3, r6}, @NL80211_ATTR_TXQ_QUANTUM={0x7}, @NL80211_ATTR_TXQ_LIMIT={0x0, 0x10a, 0xeb4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x0, 0x40, 0x200}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x0, 0x3e, 0x7f}, @NL80211_ATTR_WIPHY_FREQ={0x0, 0x26, 0x9}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 02:02:00 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000340), &(0x7f0000ee3000/0x2000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index, 0x0, 0x0}, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000007, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x1}, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="159300400300000000006b00000008001781"], 0x3}}, 0x0) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000080)) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) [ 471.814123][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:02:00 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 471.966607][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:02:01 executing program 1: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000300)={{&(0x7f0000000180)={'GENERAL\x00', {&(0x7f0000000240)=@adf_dec={@bank={'Bank', '0', 'CoreAffinity\x00'}, {0x7}, {&(0x7f0000000000)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"fc37c26e121cf131e825e530c28b63f39fe666fe6ff5a9c56b6284e730e7094bf13393a1dd3f40f4f817e9949f9de93eb6c2a5badf1ee4b75ac5f4f376d44349"}}}}}, {&(0x7f00000000c0)={'KERNEL\x00', {&(0x7f0000000480)=@adf_dec={@normal='NumberDcInstances\x00', {0x9}}}}}}}, 0x3f}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010002100000101804135000000000000109022419de4f49030000000921000ca40122dc01f4048103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000a3e83c20cd06020201040500000109021b000600000000090400000157eb4b00090586a3"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 472.269794][ T1315] tipc: TX() has been purged, node left! 02:02:01 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x2, 0x5, 0x14, 0x400, 0x991f, 0x0, 0xac}, 0x1c) r0 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) r1 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0xc00}, 0x143ccf380f89c2dd) r2 = accept4(r0, &(0x7f0000000280)=@ethernet={0x0, @dev}, &(0x7f0000000300)=0x80, 0xc00) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 02:02:01 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x60050000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x18, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000000000200"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x0, 0x5, 0xd2, 0x56, @local, @mcast2, 0x40, 0x80, 0x9, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3f, 0x7, 0x48, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x80, 0x20, 0x3, 0xea}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="040025bd7000fcdbdf250d00000034000180140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f627269646765004800018008000100", @ANYRESHEX, @ANYBLOB="08000100", @ANYRES64=r2, @ANYBLOB="140002006261746164763000000000000000000008000300000000000800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265746170300000000000000000001400020076657468315f766c616e0000000000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="300001801400020069703665727370616e30000000000000080003000100000008000100", @ANYRES32=0x0, @ANYRES32], 0x134}, 0x1, 0x0, 0x0, 0x44805}, 0x40040) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4010744d, 0x0) 02:02:01 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x20, 0x3, 0xed, 0xd39, 0x3, 0x3, 0x2, 0x237, 0x40, 0x2a, 0xbe, 0x4, 0x38, 0x2, 0xf4, 0x3, 0x8}, [{0x6474e551, 0x6, 0x20, 0x3, 0x7, 0x9b8, 0x5, 0x14}], "9acd116e88bda0f748c43356e5777c101212646a4d626d49be093c2d431d05a71fc6531b12e531fa079fcd00479a6d9b8762b879a3ab9a8c4f971a630715443f4a94648819dfdb1a59d7523712fe1275df9489edf967e5e328a7b903f35c7d2527e88345af59982427f48c9d3b65046de1eb7db8f5168a4e0eac8b7828d1", [[], [], [], [], [], []]}, 0x6f6) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) fchmod(r1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000daffffffbe45c28eb540ff40bfa637c14d436f223fae6adbaf2039a16cb3c5e63079521c24d07b70fb950b793356acf5c4c43fb97e4e54908f62b58d8bffa579bf8c656f56d8f1066291ba04dbf395b5abbe0db3141221def6d6a54195867ad02de8b2dbf8301073728d88683c622ee47e7e00"/129, @ANYRES16], 0x10) [ 472.889661][ T8713] usb 2-1: new high-speed USB device number 10 using dummy_hcd 02:02:01 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x8, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040850) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc92}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x180}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0x1, 0x0, 0x40, 0x454cb3c7, 'syz0\x00', 0xed}, 0x1, 0x10000610, 0x6, r4, 0x9, 0x3a28, 'syz0\x00', &(0x7f0000000400)=['broadcast-link\x00', '\'$\x00', ':#\xd5^:]!.Q\x00', '{*&-]&):[M\x00', 'TIPCv2\x00', '\x00', ',\x00', 'broadcast-link\x00', '\x00'], 0x41, [], [0x3, 0x1, 0x7ff, 0x4]}) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 473.140287][ T8713] usb 2-1: Using ep0 maxpacket: 16 [ 473.280531][ T8713] usb 2-1: config index 0 descriptor too short (expected 6436, got 36) [ 473.289229][ T8713] usb 2-1: config 79 has too many interfaces: 222, using maximum allowed: 32 [ 473.298166][ T8713] usb 2-1: config 79 has an invalid descriptor of length 0, skipping remainder of the config [ 473.308687][ T8713] usb 2-1: config 79 has 0 interfaces, different from the descriptor's value: 222 [ 473.318102][ T8713] usb 2-1: New USB device found, idVendor=0418, idProduct=5013, bcdDevice= 0.00 [ 473.327397][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:02:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x60050000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x18, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000000000200"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x0, 0x5, 0xd2, 0x56, @local, @mcast2, 0x40, 0x80, 0x9, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3f, 0x7, 0x48, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x80, 0x20, 0x3, 0xea}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="040025bd7000fcdbdf250d00000034000180140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f627269646765004800018008000100", @ANYRESHEX, @ANYBLOB="08000100", @ANYRES64=r2, @ANYBLOB="140002006261746164763000000000000000000008000300000000000800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265746170300000000000000000001400020076657468315f766c616e0000000000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="300001801400020069703665727370616e30000000000000080003000100000008000100", @ANYRES32=0x0, @ANYRES32], 0x134}, 0x1, 0x0, 0x0, 0x44805}, 0x40040) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4010744d, 0x0) 02:02:02 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x60050000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x18, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000000000200"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x0, 0x5, 0xd2, 0x56, @local, @mcast2, 0x40, 0x80, 0x9, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3f, 0x7, 0x48, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x80, 0x20, 0x3, 0xea}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="040025bd7000fcdbdf250d00000034000180140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f627269646765004800018008000100", @ANYRESHEX, @ANYBLOB="08000100", @ANYRES64=r2, @ANYBLOB="140002006261746164763000000000000000000008000300000000000800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265746170300000000000000000001400020076657468315f766c616e0000000000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="300001801400020069703665727370616e30000000000000080003000100000008000100", @ANYRES32=0x0, @ANYRES32], 0x134}, 0x1, 0x0, 0x0, 0x44805}, 0x40040) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4010744d, 0x0) 02:02:02 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x12) [ 473.876840][ T9956] udc-core: couldn't find an available UDC or it's busy [ 473.884059][ T9956] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 02:02:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r3, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r3, r2, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd70008567cc573e02b695a000000005000500c551f4c4957eabdcdeca781b89db60b2eac5529d9fff8b346811837e1e187964ea727af6585c11718a3757c51641"], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000084) fcntl$dupfd(r2, 0x406, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) [ 474.218706][ T8713] usb 2-1: string descriptor 0 read error: -71 [ 474.235494][ T8713] usb 2-1: USB disconnect, device number 10 02:02:03 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = socket(0xf, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf2501000000080002000200000008000100020054b6a8f42e12f7b77509000008000100030000000800020002000000332f6938ab0421f1835fafcc8cb052ad67f2f818d34cb49d2b4bb070180b9a40754c3d866734b617988c5898390f6f1b825d6d10bd524b70fcc5"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:03 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x41) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 475.076155][T10002] udc-core: couldn't find an available UDC or it's busy [ 475.083413][T10002] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 475.688334][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.709657][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:02:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x20c603, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000200)=0x5, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 02:02:04 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x545080, 0x0) r1 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x400, 0x0) write$cgroup_type(r2, &(0x7f00000002c0)='threaded\x00', 0x9) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x81, 0x386, &(0x7f00000000c0)="44afa461ded6663bdef4804dd6d99154175a12a9ecbd792b864c5e6ebe9fdf4a2d2a0a2ad200c38ae8d5b0ba5565922f7f489bb8a6525e0a858146a85f882bb5b276efa1b2aaf8eff811e48e52002438f26da910224f66c10850e4d482004a4b1323b8b82dd22de404451791aac2551f8fbff0927cd6501b414f74593a01b4a122519c2e23098df1942dada9d47726f85fa60c7f55e2a7e5bd3ca87703ab64d619a6f334941bc241dec66edeb40284255fb7f7177fadd1059051a4030b1c48feaace73f2dddd974b67aca72e2134ab6fd9a30b093a9de6c5856dcf9db5a884a738c8bdeea25cb435ec5bdc945019e3c344", &(0x7f00000001c0)="edbcca5a6f6819f1aeeacb5c7e86f25ecc7d813e5f134587235f8e4e525577f0ec5e76f5685414cff879bea41538431c445594868c42e2e3a64897270c2b2ee1d20ee5f6831b8670cc501835607fd02814447f67c038bc9e5b8aa9600baf6f93e91c5dac228c6d32fbd7d9797894d0d0e65b8c80c35d078cc8b0134103882c5d93fcd261146e7ec295cbb3d87f3f8b7c42ce83b80d3a6747a6ef9fdfecd2c2b5", 0xf1, 0xa0}) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x9}, {0x7, 0x81}, {0x5, 0x1}]}, @restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x3ff}}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x5}, {0xa}]}]}, {0x0, [0x2e, 0x30, 0x61, 0x61, 0x0, 0x30]}}, &(0x7f0000000180)=""/135, 0x90, 0x87, 0x1}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x10001, 0x4, 0x1000}) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000002c0)={0x9a0000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa00906, 0xb9c, [], @p_u32=&(0x7f0000000240)=0x5}}) [ 476.466449][ T9993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.640197][ T8713] usb 2-1: new high-speed USB device number 11 using dummy_hcd 02:02:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 476.908858][ T8713] usb 2-1: device descriptor read/64, error 18 02:02:05 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x684542, 0x0) rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x1) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8f, 0x7, 0x2, 0x0, 0x3, 0x3e, 0x67, 0x202, 0x40, 0x3ce, 0x6ae, 0x0, 0x38, 0x2, 0x8, 0x8, 0x280}, [{0x70000000, 0x11, 0xde0, 0x0, 0xfff, 0x401, 0x9, 0x1}], "847040a6f5f179f103efd80d6fbcf11c99ca138971a72935e6af79d8382e79dea6930838c07f96d50a672ecae492dbf208f6b66664857ced0f6efff4fe8e5bb8de96157fb57e9ae3a2a0ae30be079b014356a947d06a8ca20021d5eb79c2f8a75eaf167ee0b6b8f3cafa7eaab89aeb11652608ae4173c6291298057399fd3a8d0e1c3dccba35ab018af7f24912bec6656aac0020b4b2934e68121c6722a372f656860bd68a52e6c83d744a05ad8e623364", [[], [], [], [], []]}, 0x629) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$TCSETXW(r3, 0x5435, &(0x7f00000000c0)={0x401, 0x3f, [0x2, 0x8, 0x101, 0x401, 0x3], 0xa39}) [ 477.057746][T10030] IPVS: ftp: loaded support on port[0] = 21 [ 477.332326][ T8713] usb 2-1: device descriptor read/64, error 18 02:02:06 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x45c00, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xaa44d8ab0c1457f7, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1f, 0x404f83) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000100)={0x6, 0x1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x48102, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000180)=""/218) [ 477.533371][T10030] chnl_net:caif_netlink_parms(): no params data found [ 477.612281][ T8713] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 477.718082][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.725699][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.735334][T10030] device bridge_slave_0 entered promiscuous mode [ 477.758803][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.766060][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.775669][T10030] device bridge_slave_1 entered promiscuous mode [ 477.829776][T10030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.850365][T10030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.908591][ T8713] usb 2-1: device descriptor read/64, error 18 [ 477.936233][T10030] team0: Port device team_slave_0 added [ 477.985452][T10030] team0: Port device team_slave_1 added 02:02:06 executing program 0: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x19}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x7, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00') preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/81, 0x51}], 0x4, 0x1000, 0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x11000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 478.295295][T10030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.302785][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.329018][T10030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.342997][ T8713] usb 2-1: device descriptor read/64, error 18 [ 478.471637][ T8713] usb usb2-port1: attempt power cycle [ 478.507012][T10030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.514242][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.540411][T10030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.710878][T10030] device hsr_slave_0 entered promiscuous mode [ 478.745101][T10030] device hsr_slave_1 entered promiscuous mode [ 478.781465][T10030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.789224][T10030] Cannot create hsr debugfs directory [ 478.880009][ T8712] Bluetooth: hci3: command 0x0409 tx timeout [ 479.178563][ T8713] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 479.217736][T10030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.237606][T10030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.262563][T10030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.311931][T10030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.329392][ T8713] usb 2-1: device descriptor read/8, error -71 [ 479.558629][ T8713] usb 2-1: device descriptor read/8, error -71 [ 479.889554][T10030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.930286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.939422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.969195][T10030] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.004079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.015139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.024608][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.031996][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.100077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.109739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.119622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.129120][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.136430][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.145602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.156428][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.167318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.177765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.214019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.224372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.234972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.256370][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.266211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.287506][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.297571][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.327091][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.400932][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.408817][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.449772][T10030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.529821][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.540252][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.617970][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.628859][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.652818][T10030] device veth0_vlan entered promiscuous mode [ 480.663800][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.673237][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.714453][T10030] device veth1_vlan entered promiscuous mode [ 480.830449][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.840454][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 480.850188][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.860345][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.886382][T10030] device veth0_macvtap entered promiscuous mode [ 480.910490][T10030] device veth1_macvtap entered promiscuous mode [ 480.960590][ T9511] Bluetooth: hci3: command 0x041b tx timeout [ 480.994148][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 481.005247][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.015368][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 481.026074][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.036242][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 481.046925][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.061139][T10030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.075980][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 481.086041][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.095614][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.105904][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.133230][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 481.143909][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.154551][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 481.166528][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.176631][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 481.187241][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.201423][T10030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.209538][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.219679][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:02:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7cc8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000003c0)={0x9, "5ca7a199a9cf8d85f5de2db72dae4baaa49f1784ad31ef3b842f5b15c7979e41", 0x2, 0x0, 0x1, 0x2000000, 0x200, 0x2}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timerfd_gettime(r6, &(0x7f0000000040)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f00000001c0)={0x3, 0xda}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x335}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bf2c}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x55}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x90}}, 0x0) 02:02:10 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x15871eb0b45a92fc, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4) setitimer(0x1, &(0x7f0000000040)={{r2, r3/1000+10000}}, &(0x7f00000000c0)) 02:02:10 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x684542, 0x0) rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x1) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8f, 0x7, 0x2, 0x0, 0x3, 0x3e, 0x67, 0x202, 0x40, 0x3ce, 0x6ae, 0x0, 0x38, 0x2, 0x8, 0x8, 0x280}, [{0x70000000, 0x11, 0xde0, 0x0, 0xfff, 0x401, 0x9, 0x1}], "847040a6f5f179f103efd80d6fbcf11c99ca138971a72935e6af79d8382e79dea6930838c07f96d50a672ecae492dbf208f6b66664857ced0f6efff4fe8e5bb8de96157fb57e9ae3a2a0ae30be079b014356a947d06a8ca20021d5eb79c2f8a75eaf167ee0b6b8f3cafa7eaab89aeb11652608ae4173c6291298057399fd3a8d0e1c3dccba35ab018af7f24912bec6656aac0020b4b2934e68121c6722a372f656860bd68a52e6c83d744a05ad8e623364", [[], [], [], [], []]}, 0x629) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$TCSETXW(r3, 0x5435, &(0x7f00000000c0)={0x401, 0x3f, [0x2, 0x8, 0x101, 0x401, 0x3], 0xa39}) 02:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r3, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r3, r2, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd70008567cc573e02b695a000000005000500c551f4c4957eabdcdeca781b89db60b2eac5529d9fff8b346811837e1e187964ea727af6585c11718a3757c51641"], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000084) fcntl$dupfd(r2, 0x406, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 02:02:11 executing program 0: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = dup(r0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x28, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 482.862844][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 483.117018][ T9121] Bluetooth: hci3: command 0x040f tx timeout 02:02:12 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'vxcan1\x00', 0x40}) [ 483.246910][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:02:12 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x4b0302, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfffffffb}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x9}, 0x8) pwritev(r1, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x400002) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, r3, 0xfffffffffffffffe) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:12 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x1, 0x0) [ 483.733171][T10270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.988646][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:02:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7cc8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000003c0)={0x9, "5ca7a199a9cf8d85f5de2db72dae4baaa49f1784ad31ef3b842f5b15c7979e41", 0x2, 0x0, 0x1, 0x2000000, 0x200, 0x2}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timerfd_gettime(r6, &(0x7f0000000040)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f00000001c0)={0x3, 0xda}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x335}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bf2c}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x55}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x90}}, 0x0) 02:02:12 executing program 0: setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x8, 0x0, [{0x1db, 0x0, 0xffffffffffffffb1}, {0xb9c, 0x0, 0x5}, {0x286, 0x0, 0x2}, {0x32d, 0x0, 0x80000000}, {0x2e2, 0x0, 0x8}, {0x9ff, 0x0, 0x1f}, {0x181, 0x0, 0x3}, {0x94d, 0x0, 0x6}]}) io_setup(0x1f, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:13 executing program 1: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}, 0x0, 0xfcd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000006c5e1b3300fff6409c1b9820c162cb838be22d0d9a0207bfa80c097199d2b9748734d97d679b1973f208767eb778dc35b93abe8229ad06392b25ba205c65c9032f3d3423d9"], 0x58) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0xc0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2000100000015, 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f00000001c0)) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', &(0x7f00000000c0)='vmnet1keyringem1cgroup\x00', 0x17, 0x1) write$P9_RREADLINK(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="20003ad86e0019582e2d951ed49e30fe1d29c7afe3cc7756242f7ee1e2c22cfcf0ac8b089a1b44b32d04fbb3f6c55f1cbeeb5abf0a9cff6b6dce19a59428bc18c47020c47aa0d6512f8e2b0c6aec3a1bf38661e83978eb7275b6f6755b75b15e650a6f01c09b211f"], 0x10) sendfile(r2, r3, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) fanotify_mark(r4, 0x4, 0x8000000, r0, &(0x7f0000000180)='./file1\x00') 02:02:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x5, 0x4) 02:02:13 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000320001000000000000000000000000008c0001000c001700070001007874000010000f0009000100766c616e000000002c00010008000300ff0700000c00120007fff300ffffff7f04000f000b0001"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socket$pppoe(0x18, 0x1, 0x0) [ 485.169095][T10337] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.178740][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.198781][ T9121] Bluetooth: hci3: command 0x0419 tx timeout 02:02:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r3, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r3, r2, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd70008567cc573e02b695a000000005000500c551f4c4957eabdcdeca781b89db60b2eac5529d9fff8b346811837e1e187964ea727af6585c11718a3757c51641"], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000084) fcntl$dupfd(r2, 0x406, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 02:02:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000000), 0x41, 0x2, 0x0) 02:02:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x32, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x401, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) 02:02:14 executing program 0: ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @frame_sync}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000000)="b5082e563200"}, {&(0x7f0000000080)="3d7f92ff443da6272eabc8be8ed3afe5b077f5cf6fe29b2d7ad1e7aeada4ea53127832b8c6d71ce11e1b9470169f051becdb58094b6e7255cb4f2fadaf776799852591de0b"}, {&(0x7f0000000140)="ee7a559dca15fb5fc87f0b85f4771d5d9b03d9f52467768c8c24c2bb74c25735a1a765bdedf1861d599f3d293541fcb49c60ae2d2a3abb328b4fb6bc51c39b937e3ce5c2284a5fc788ed480af27704700535344281eb1745bd4406eec407ff76a63915b701c8ef13918dd3394daf80db628c749801"}], 0x2, 0x0, 0xfffffffd) 02:02:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@getqdisc={0x34, 0x26, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0xb, 0xffff}, {0x5, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1a0, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1a0}}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0100", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @private2}}}}}}}, 0x52) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) [ 486.170337][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.384137][T10347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:02:15 executing program 1: syz_usb_connect(0x3, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0xdb, 0xa5, 0x40, 0xc52, 0x2432, 0x88c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x8b, 0xfc, 0x11, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "0f96aa75"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x0, 0x20}, {0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @acm={0x4, 0x24, 0x2, 0xd}]}]}}]}}]}}, 0x0) 02:02:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x32, 0x8, 0x2, 0x5, 0x0, [@mcast1, @remote, @loopback, @remote]}, 0x48) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 486.948101][ T28] usb 2-1: new high-speed USB device number 15 using dummy_hcd 02:02:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x600500) write$binfmt_misc(r2, &(0x7f0000000400)={'syz1', "a1d0b71f3ecc3dab03d531cf91b3d0b9bda1b80790c621a39084bf75dced51d8bfcd96716aaac84bb9e666b630508093da2c8a21ca8a83ebe9be13caace46573b7928ab8e712b3472f4424a26e53d78a210e20c17eafdcd719249b68a776ee"}, 0x63) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0xfffffffffffffffe, 0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000072f7efa5e4d7a000200005801400028008000100000000000800030283020274680000"], 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1e4, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x60, 0x3, "6e8f32d20b6bbf76c68149b184faf86a1e3cfaadf6d319e920a5326b2937111d7a7e78513f0a2d1577a1526e98360c535adcf4766b6cfad842d19b16c757b0f43565c18e279aa4f1190a54f66f05971333ee15a9e401d8f1b35bb276"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ad5542fc87896bf36359ed50b2c1b007712cc3f3c550d5402591fb1000"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8890}, 0x4026040) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 487.308958][ T28] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 487.317433][ T28] usb 2-1: config 0 has no interface number 0 [ 487.323988][ T28] usb 2-1: New USB device found, idVendor=0c52, idProduct=2432, bcdDevice=88.c2 [ 487.333376][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:02:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd2b19dde123ffc31}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000613d420054000000000000009500000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9}}, 0x30) r3 = dup(r1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r4, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x4, 0x8, 0xfffffffe, 0x80000001, 0x6ad8, 0x0, 0x6, 0x0, 0x8, 0x1, 0xffff, 0x0, 0x6, 0x2, 0xaa, 0x4, 0xc434, 0x34, 0x2, 0x9, 0x7, 0x6, 0x2, 0x34, 0xb942, 0x9, 0x81, 0x8, 0x9, 0x7fff, 0x37c6, 0x8]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f00000001c0)="5cdd30c37f3e0a6633c9f7b90800", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)={r9}) [ 487.432761][ T28] usb 2-1: config 0 descriptor?? 02:02:16 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'virt_wifi0\x00', {0x7ff}, 0x6}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 487.484091][ T28] ftdi_sio 2-1:0.246: FTDI USB Serial Device converter detected [ 487.493952][ T28] usb 2-1: Detected FT-X [ 487.700374][ T28] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 487.721272][ T28] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 487.768947][ T28] ftdi_sio 2-1:0.246: GPIO initialisation failed: -71 02:02:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) r2 = socket(0x11, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt(r3, 0x400, 0x81, &(0x7f0000000040)="6b8232f10a741f955ce0583030d1514e3048fe5cd3", 0x15) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) [ 487.847526][ T28] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 487.898382][ T28] usb 2-1: USB disconnect, device number 15 [ 487.925821][ T28] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 487.936546][ T28] ftdi_sio 2-1:0.246: device disconnected 02:02:16 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x82c01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)="00f2adfb6d93b497dbe280ef8837d66fa0021e81140fc45245da42183fe08fa7ad391c3741e755b5291b383ad93bea8ffd2d5931b9f4f436d4666ea5ed6cbcff35e1a7", 0x43}], 0x2, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) pwritev(r1, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x1d2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)={0x3, 0x4, 0x4}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB="5200000060ea67da65c9ba90d49dc4d9fb0696a4372fe2d72b8391a0d48ba79ae04dba2ad871d8e0f1620d47ff41ec017a345b6f6b84075ffdaf02197b3b2fa6418c0597a36ddc230109a7ad617f6be34e359076c44c"]) [ 488.848510][ T28] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 489.209261][ T28] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 489.217622][ T28] usb 2-1: config 0 has no interface number 0 [ 489.224184][ T28] usb 2-1: New USB device found, idVendor=0c52, idProduct=2432, bcdDevice=88.c2 [ 489.233525][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.302452][ T28] usb 2-1: config 0 descriptor?? [ 489.352775][ T28] ftdi_sio 2-1:0.246: FTDI USB Serial Device converter detected [ 489.389389][ T28] usb 2-1: Detected FT-X [ 489.568748][ T28] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 489.597924][ T28] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 489.628372][ T28] ftdi_sio 2-1:0.246: GPIO initialisation failed: -71 [ 489.658960][ T28] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 489.690006][ T28] usb 2-1: USB disconnect, device number 16 [ 489.734387][ T28] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 489.745043][ T28] ftdi_sio 2-1:0.246: device disconnected 02:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r3, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r3, r2, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd70008567cc573e02b695a000000005000500c551f4c4957eabdcdeca781b89db60b2eac5529d9fff8b346811837e1e187964ea727af6585c11718a3757c51641"], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000084) fcntl$dupfd(r2, 0x406, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 02:02:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) sync_file_range(r0, 0xc85, 0x1000, 0xe) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)="b5", 0x1}], 0x2, 0x0, 0x8000) 02:02:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) r2 = socket(0x11, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt(r3, 0x400, 0x81, &(0x7f0000000040)="6b8232f10a741f955ce0583030d1514e3048fe5cd3", 0x15) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) 02:02:18 executing program 1: syz_usb_connect(0x3, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0xdb, 0xa5, 0x40, 0xc52, 0x2432, 0x88c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x8b, 0xfc, 0x11, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "0f96aa75"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x0, 0x20}, {0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @acm={0x4, 0x24, 0x2, 0xd}]}]}}]}}]}}, 0x0) 02:02:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10004800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="31000001", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf250300000005000500011000000c001000060000000000000008000b0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24020080) listen(r1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) r6 = socket(0x11, 0x3, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000300)={0x2, 0x2, 0xd4, 0x5, 0x0, 0x3}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={r5}) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x27, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) futimesat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 490.620128][ T28] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 490.944414][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 490.998941][ T28] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 491.007304][ T28] usb 2-1: config 0 has no interface number 0 [ 491.013841][ T28] usb 2-1: New USB device found, idVendor=0c52, idProduct=2432, bcdDevice=88.c2 [ 491.023322][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.239354][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 491.368122][ T28] usb 2-1: config 0 descriptor?? 02:02:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="00fddbdf2508000300000000000800030000000000584ca6f300000000080015000200000008004b001300000008004f0000000000000000000000000000000093bb116248e0d5fd65f905156eb915ef708022588776b7b84980a2510f8eaf9f41cfb0af5767dbbb6e51dcd04089d9aca5a55bcf85cf74b79f2106c191870710d4e6091d66d51ad05c0066916a94f3ea2255c72d4d99667a2e42654a2af9dde1afcc9251267f4c41cc211d6b42a85ccba1f6bd6482f6caa9c895b14ae2be128813d61d14bbe7d878d76dd6a87120cac06882ba72f4d2e5"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) readahead(r0, 0xe56, 0x3) pwritev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000140)='fho', 0x1}, {&(0x7f00000016c0)="74c48124f10a50cb989f52071567e222ad41e22e5aabc6b840db577e060ad7c32d72b13258496948bcf2e3ccae8002639eec4d38b3ff61476bbb2e1f24ec782e0000000000000000000000000000000000000000000e329f000ca3518ea50d0b331254846b62a8775422c7adcecb0c87ef064fa59e180823e1fbd4f417c1b19c7c93c6f515c18d8fde0c487cef266e3d78fce68df295efcb21501c0892a8fc04146ef7439ea2814db85e85cc71e6f0c6aa98f90f29e428d6d85facfdd5823f0132d71bf26c8701010000ff80ae32f740fc259aabfc6d453faa9fa8859b5ab19c8778386397726df3d6c1ca0d158b57443c7480a9b43765dbb040e6f804900645bad4f2a7f8cc9ee295c741d3caf9cfa2c0732cd3cc573ba2c960212ca3b3aa855d2490a6460aa4"}, {&(0x7f0000000200)="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"}, {&(0x7f0000001200)="0e9f8947ad1bdd2fb234e23177bee529ee296380ef2b5102373c7b0f09d734a82a7d6eb978ce02a060df2140223e471f3b40febc746089448e6539fbc1f4f96184a43b9c8cc582f29b836d544a4d933cd224554286fc0a8718477b04faf7a9b621600cd40745f94548e8a37a6c833ae0aca78f1e19c1219721a3d8dfc62a9cd16b4dd5def77e724a000b5930ac8acc109e7039cc5d4b2dbc1e40eafc999a4627a7d9a7724e04a524727361fb3cfc721cb72b9dc17c9b2a914eb8bfa0dfd54070c35fa4ee0061a229"}, {&(0x7f0000001300)="4571d6c75bbf9ee240e80b49024f4c0afe4333fc2f7d2a03e41f2db78b2918eb382ab6990eaad7da86c435562ad9ec1d58f8067a9af958148056daf0d5edb3afd0c1935ec1720f7815271cfe9acd9c526e64702b9bfe4e073170596696cc692d9a94d45096190e4ff4733cfc69859607ee6e12e93d3e1ce603307fa0a0a99388ddc43227270b30df6b225c621436e35078154931c340cf807b2ebcb6da26d0a380e9742b0e4d13322d976a105ea925bd7e736e46bb93da4dd1a00baeb4aab438b7ace9861e22a137040d892bb177b9fc27ef8c025d"}, {&(0x7f0000001580)="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"}, {&(0x7f0000001800)="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"}], 0x1, 0x0, 0x70c9230) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) [ 491.485068][T10438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.521954][ T28] ftdi_sio 2-1:0.246: FTDI USB Serial Device converter detected [ 491.531200][ T28] usb 2-1: Detected FT-X [ 491.644955][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 491.680147][ T28] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 491.700015][ T28] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 491.740884][ T28] ftdi_sio 2-1:0.246: GPIO initialisation failed: -71 02:02:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x800, 0x8, 0x6, 0x8f3e, 0x10, 0xe53, 0x9}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r1, 0x100}, 0x8) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) [ 491.790239][ T28] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 491.897421][ T28] usb 2-1: USB disconnect, device number 17 [ 491.952215][ T28] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 491.962964][ T28] ftdi_sio 2-1:0.246: device disconnected 02:02:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x0, 0x0, 0x0) 02:02:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) getsockname$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x20) 02:02:21 executing program 0: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/61) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) 02:02:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04dafaff0000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x47}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 493.607710][ T28] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 493.847689][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 493.969194][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.980564][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.990667][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 494.099719][ T28] usb 2-1: New USB device found, idVendor=045e, idProduct=fada, bcdDevice= 0.ff [ 494.109186][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 494.117419][ T28] usb 2-1: SerialNumber: syz [ 494.169617][ T28] usb 2-1: config 0 descriptor?? [ 494.878669][ T28] hid-multitouch 0003:045E:FADA.0007: unknown main item tag 0x0 [ 494.887752][ T28] hid-multitouch 0003:045E:FADA.0007: unknown main item tag 0x0 [ 494.947487][ T28] hid-multitouch 0003:045E:FADA.0007: hidraw0: USB HID v0.00 Device [HID 045e:fada] on usb-dummy_hcd.1-1/input0 [ 495.078552][ T28] usb 2-1: USB disconnect, device number 18 02:02:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r3, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r3, r2, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd70008567cc573e02b695a000000005000500c551f4c4957eabdcdeca781b89db60b2eac5529d9fff8b346811837e1e187964ea727af6585c11718a3757c51641"], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000084) fcntl$dupfd(r2, 0x406, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 02:02:24 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x6000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f00000000c0)=0x8) 02:02:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000240)={0x1}) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x480000, 0x0) pwritev(r5, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000780)={r8, 0x7ff, 0x4}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB="3a02003044ee00"/18]) r9 = accept$unix(r2, &(0x7f0000000440)=@abs, &(0x7f0000000400)=0x6e) io_submit(r4, 0x2, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000000)="78984f6bb00c615d01baf4597a2e506e51a209051dc75a478f3fa35561b11dd7140c1795b2b4bdcf317ddcda4e7e", 0x2e, 0x100000001, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x59d, r9, &(0x7f0000000180)="c0d3d0f0f1", 0x5, 0x82, 0x0, 0x3}]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0020d2aa5c3b0c0000000008d8390000000000cabb1e259cbfd6ecca9d6482e8fecd6273b9379cfbd797d9f46b24a2b0fc119dd8c3510af9bb9f210c8b45ead38165b0312744147d4e9be6a02a50b3c2632b6ab26f85199b43bdbc86d6a6bb85838c945bfa4d290cf4b5e0162026026d64caba85a4b5ea9cf6f991883fc017f1580e8c6f05065e4cf539860dcc2269aead74fb0d11c59dd88e38cc1e7726e12c6cbee0710193c83365d6b6000000000000000000", @ANYRES32=0x0, @ANYBLOB="0b00010062726964666500000c0002221527d4caaa9cccd5d05843f9a6800500240001000000ae92a124a6889928a205cc000000000000000000000000792de36dc7e1ded76dabe87040b1c54c0da49eac6de4a259d846312855d268a57040513b4a07f2c2b8e62b1cd4ee79ae0d26d04e989b13cc2680782d80f0e09256af05a64301109556c98b73e856cb06887cec583433c72c32b34c384fe648378fbfc173b033e6990d27212b3fe730de804ba2424fb31446a0d725b313ec5437f32b0a18b9fca5d8ce23031f7f36d05916d251682ae955ae218d422a602e70fc00adeb3e8164d5580465e3aa95ae51"], 0x3c}, 0x1, 0x0, 0x0, 0x20044850}, 0x0) [ 495.859953][ T9511] usb 2-1: new high-speed USB device number 19 using dummy_hcd 02:02:24 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="54417a48b97ef8e1ab4d44b0bdcc4238104acf8f064653619cee1d240ea1d62cc237a7d97e5d9cfa2e843317566f6e637e9e", 0x32}, {&(0x7f0000000040)="ba3b1cb768ecae0699df85374a37b34f364f280e23299ae607e25318410edf32311045717218d61c4644596722c7fe2fd28ca006cf88d6b42012467588a758d8fe0925f684903fbd12af1c", 0x4b}], 0x2, 0x4, 0x7) 02:02:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000240)={0x1}) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x480000, 0x0) pwritev(r5, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000780)={r8, 0x7ff, 0x4}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB="3a02003044ee00"/18]) r9 = accept$unix(r2, &(0x7f0000000440)=@abs, &(0x7f0000000400)=0x6e) io_submit(r4, 0x2, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000000)="78984f6bb00c615d01baf4597a2e506e51a209051dc75a478f3fa35561b11dd7140c1795b2b4bdcf317ddcda4e7e", 0x2e, 0x100000001, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x59d, r9, &(0x7f0000000180)="c0d3d0f0f1", 0x5, 0x82, 0x0, 0x3}]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0020d2aa5c3b0c0000000008d8390000000000cabb1e259cbfd6ecca9d6482e8fecd6273b9379cfbd797d9f46b24a2b0fc119dd8c3510af9bb9f210c8b45ead38165b0312744147d4e9be6a02a50b3c2632b6ab26f85199b43bdbc86d6a6bb85838c945bfa4d290cf4b5e0162026026d64caba85a4b5ea9cf6f991883fc017f1580e8c6f05065e4cf539860dcc2269aead74fb0d11c59dd88e38cc1e7726e12c6cbee0710193c83365d6b6000000000000000000", @ANYRES32=0x0, @ANYBLOB="0b00010062726964666500000c0002221527d4caaa9cccd5d05843f9a6800500240001000000ae92a124a6889928a205cc000000000000000000000000792de36dc7e1ded76dabe87040b1c54c0da49eac6de4a259d846312855d268a57040513b4a07f2c2b8e62b1cd4ee79ae0d26d04e989b13cc2680782d80f0e09256af05a64301109556c98b73e856cb06887cec583433c72c32b34c384fe648378fbfc173b033e6990d27212b3fe730de804ba2424fb31446a0d725b313ec5437f32b0a18b9fca5d8ce23031f7f36d05916d251682ae955ae218d422a602e70fc00adeb3e8164d5580465e3aa95ae51"], 0x3c}, 0x1, 0x0, 0x0, 0x20044850}, 0x0) [ 496.120655][ T9511] usb 2-1: Using ep0 maxpacket: 16 [ 496.248846][ T9511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.260016][ T9511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.270182][ T9511] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 02:02:25 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x20000, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x31, 0x2, &(0x7f0000000400)="705ec472070c4053fad150371fd2c775e80173a9e600020ea59061a5176252712f1e7f34a5c1565b5cd1f51e2ff39d28809d8bdce25b3a127d1d41111e1569fb28f9fcf71a797a0c555f1542eb0dfbb7a472c017a10d566ab939a050682104fcf93d6f94479efa6fd1d6f603b903c9d9925f7da66c4c10537e23b96b7ffdf9ebb7787630f505a6848731c359828d83ad0b07ff71f0cb3e21d6a4fe7d76a889a4c8296c2d7d121eef8effc3616cf1be5aa23d64b09b107e93a0258ff022fc99329e4ad15c29349a306caf1b1de0dd5d08172be9578ed211503808344da33a8a6c799940fff5c14c039663cb68f153d46ce31f10d437b9fc0f2335c5bba04354f8917045813d2bff1d4035a6e2eec8b9e94328783147beb49ed4bc8af05aa63426733dc28633d09dbf83caa468716e00c079d46d374342e3b1a0157c8a6d0389f000569993d06bb0729776d4b744449a2039b5100b71e6c0bba192cf5d0a0e9e129b027055345581414cd1b28e47d32c82f516870ab6f9ed1c3be672fdedb23305b62d540d2132340d90ca0f20df08a6f1658b0ae5deedc74b8867d4f17f3ccbfc680d3a54b36a14f79fce85a9caba5846710b627d784ca12535e2605f4f8a16cdfb786a27e742e9fcf13c20be755613f0a10dae50fb9de8e5eaa8cbd386cc8c64a2f7b020a2c585618688304370cdd571735ced594103a07f35a7a93dda0929f1b2277877f6ffb82be2b0d6cb8b281a0819a4b6bb09e583d71b4a5a9c667f0876fcf3452a79d78f3a19af6bf295243b386b918a35f7b0ad22f8110e0fe78667a008530bd356d42fc9c856ca0d6f69278874d8612b0ca155d292792a6d7224b70b7ffd271717b13aba8cf2caef30d28386140fab5655366327d1ad76caf199455ca1744a2dcc0c554aed3005a1f18bdbb4a2410a37695c44b22ad1db2e354904cfea6283245e59fa1cab9daabffe7bf4706f2824db6109d4cd31401eeecaceb65284e09faa1b72bb73fb2be519621863a82c781fd773f7966820aba8a0bc6f41cb68183da355a1216f17ae014e60097a976ba269a1ece1e75b058505a6ecfa719d9be0896a6b60f32f7ef809162f9963cc2f17d714877493585172a0f9c8255ab853ea00dff0a415ef8637673a7ac38720a1e54bd4fc8b27c7424efd0f2d1f90b5d2ab917ff644b44486c47aff62bcf34abf1827428c52e353ff8e116a51c362b9f8b95a9e560bbe9508395b18362b0efb33f72f6fd5cc500e7617e2249565f9f7c4d695de26f3f5e7f17616e838f15abe310fac8d70b0bdf55f6abb72a57b7cdb0a3cd5dba319cedb28fe882072d0693d84fa6df40b1e149caf7afab5ce9c8d9072df7e5930e34a209ee4ce66c1f751ab690bea55a3098ff7596d29d3cc961e1ad681854109a804263230cb87a86260a65672fd1c901ceda9d7ec9f818a2c05e2"}) sched_getparam(0xffffffffffffffff, &(0x7f0000000040)) 02:02:25 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003510800000010000000007000010", @ANYRES32=r3], 0x2c}}, 0x0) r4 = socket(0x15, 0x5, 0x3) sendmmsg$alg(r4, &(0x7f0000000140), 0x3, 0x0) [ 496.663123][T10514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 496.719546][ T9511] usb 2-1: New USB device found, idVendor=045e, idProduct=fada, bcdDevice= 0.ff [ 496.728840][ T9511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 496.926476][ T9511] usb 2-1: config 0 descriptor?? [ 496.991789][ T9511] usb 2-1: can't set config #0, error -71 [ 497.049462][ T9511] usb 2-1: USB disconnect, device number 19 02:02:25 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x300, 0x4) 02:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0, 0x2c8}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x12000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r0, r1, 0x80000001}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x6) listen(r2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11fdff", 0x54, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x5, 0xa}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "67dac79ed4aecc78ed658a9f35a6e17c"}, @timestamp={0x8, 0xa}, @mptcp=@syn={0x1e, 0xc}, @timestamp={0x8, 0xffffffffffffff17}]}}}}}}}}, 0x0) [ 497.348369][T10539] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 497.419881][T10514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:02:26 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x1000, 0x0) [ 497.494580][T10541] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 497.551546][T10539] syz-executor.3 (10539) used greatest stack depth: 3128 bytes left 02:02:26 executing program 1: syz_usb_connect(0x5, 0xd82, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"/3458], 0x0) 02:02:26 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="91fe", @ANYRES16=0x0], 0x34}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)=""/139, 0x8b}], 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x3, 0x0, 0x0, 0xa44, 0x100, 0x4, 0xffffffe0, 0x6, 0x0, 0x0, 0x3, 0x1, 0x1000, 0x80000001, 0x2, 0xa, 0x800, 0x10001, 0x820e, 0x1, 0x9, 0x54cd, 0x4, 0x7, 0x8, 0x7ff, 0x0, 0x80, 0x0, 0xffffffff]}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={0xffffffffffffffff, &(0x7f00000011c0)="d2", &(0x7f00000031c0)=""/246}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)=0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2ad80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r3, 0x9}}, 0x10) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 497.933671][ C0] sd 0:0:1:0: [sg0] tag#850 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.944285][ C0] sd 0:0:1:0: [sg0] tag#850 CDB: Test Unit Ready [ 497.951053][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.960815][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.970569][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.980329][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.990090][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.999841][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.009598][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.016952][T10548] Unknown ioctl 4707 [ 498.019335][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.019455][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.042650][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.052400][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.062144][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.071894][ C0] sd 0:0:1:0: [sg0] tag#850 CDB[c0]: 00 00 00 00 00 00 00 00 [ 498.092807][T10548] IPVS: ftp: loaded support on port[0] = 21 [ 498.268388][ T3739] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 498.328590][ C1] sd 0:0:1:0: [sg0] tag#851 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.339199][ C1] sd 0:0:1:0: [sg0] tag#851 CDB: Test Unit Ready [ 498.345754][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.355516][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.365279][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.375036][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.384790][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.394548][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.404393][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.414164][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.423943][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.433701][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.443454][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.453226][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.462980][ C1] sd 0:0:1:0: [sg0] tag#851 CDB[c0]: 00 00 00 00 00 00 00 00 [ 498.495228][T10571] Unknown ioctl 4707 [ 499.019736][ T3739] usb 2-1: Using ep0 maxpacket: 8 [ 499.140507][ T3739] usb 2-1: config 5 has an invalid interface number: 169 but max is 3 [ 499.149041][ T3739] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 499.158133][ T3739] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 499.166985][ T3739] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 499.175932][ T3739] usb 2-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 499.186333][ T3739] usb 2-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 499.195537][ T3739] usb 2-1: config 5 has no interface number 0 [ 499.201951][ T3739] usb 2-1: config 5 has no interface number 1 [ 499.208299][ T3739] usb 2-1: config 5 interface 169 altsetting 8 has an invalid endpoint with address 0x17, skipping [ 499.219354][ T3739] usb 2-1: config 5 interface 169 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 499.230633][ T3739] usb 2-1: config 5 interface 169 altsetting 8 endpoint 0xA has an invalid bInterval 164, changing to 11 [ 499.242195][ T3739] usb 2-1: config 5 interface 169 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 499.253129][ T3739] usb 2-1: config 5 interface 169 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 499.264188][ T3739] usb 2-1: config 5 interface 169 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 499.275206][ T3739] usb 2-1: config 5 interface 169 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 499.286463][ T3739] usb 2-1: config 5 interface 169 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 499.297762][ T3739] usb 2-1: config 5 interface 169 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 499.308782][ T3739] usb 2-1: config 5 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 499.322063][ T3739] usb 2-1: config 5 interface 169 has no altsetting 0 [ 499.329111][ T3739] usb 2-1: config 5 interface 3 has no altsetting 0 [ 499.335913][ T3739] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=c0.18 [ 499.345274][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.878775][ T3739] usb 2-1: string descriptor 0 read error: -71 [ 499.891680][ T3739] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 499.950180][ T3739] gp8psk: usb in 128 operation failed. [ 499.955717][ T3739] ===================================================== [ 499.962745][ T3739] BUG: KMSAN: uninit-value in gp8psk_power_ctrl+0x4dc/0x1750 [ 499.970122][ T3739] CPU: 1 PID: 3739 Comm: kworker/1:2 Not tainted 5.8.0-rc5-syzkaller #0 [ 499.978441][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.988534][ T3739] Workqueue: usb_hub_wq hub_event [ 499.993559][ T3739] Call Trace: 02:02:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r3, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r3, r2, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd70008567cc573e02b695a000000005000500c551f4c4957eabdcdeca781b89db60b2eac5529d9fff8b346811837e1e187964ea727af6585c11718a3757c51641"], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000084) fcntl$dupfd(r2, 0x406, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 02:02:28 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x0, 0xfffffffd) 02:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nvram\x00', 0x80c02, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="b5", 0x1}], 0x2, 0x1000, 0x0) [ 499.996864][ T3739] dump_stack+0x21c/0x280 [ 500.001203][ T3739] kmsan_report+0xf7/0x1e0 [ 500.005632][ T3739] __msan_warning+0x58/0xa0 [ 500.010149][ T3739] gp8psk_power_ctrl+0x4dc/0x1750 [ 500.015239][ T3739] ? kasan_kmalloc+0xd/0x30 [ 500.019749][ T3739] ? __kmalloc+0x117/0x410 [ 500.024176][ T3739] ? kzalloc+0x51/0xd0 [ 500.028261][ T3739] ? gp8psk_frontend_attach+0x360/0x360 [ 500.033811][ T3739] dvb_usb_device_init+0x171e/0x3360 [ 500.039133][ T3739] gp8psk_usb_probe+0xa2/0x1a0 [ 500.043908][ T3739] ? vp702x_fe_refresh_state+0x570/0x570 [ 500.049600][ T3739] usb_probe_interface+0xece/0x1550 [ 500.054801][ T3739] ? usb_register_driver+0x900/0x900 [ 500.060129][ T3739] really_probe+0xf20/0x20b0 [ 500.064714][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.069911][ T3739] driver_probe_device+0x293/0x390 [ 500.075021][ T3739] __device_attach_driver+0x63f/0x830 [ 500.080392][ T3739] bus_for_each_drv+0x2ca/0x3f0 [ 500.085238][ T3739] ? coredump_store+0xf0/0xf0 [ 500.089912][ T3739] __device_attach+0x4e2/0x7f0 [ 500.094677][ T3739] device_initial_probe+0x4a/0x60 [ 500.099694][ T3739] bus_probe_device+0x177/0x3d0 [ 500.104545][ T3739] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.110342][ T3739] device_add+0x3b0e/0x40d0 [ 500.114908][ T3739] usb_set_configuration+0x380f/0x3f10 [ 500.120364][ T3739] ? usb_set_configuration+0xb91/0x3f10 [ 500.125922][ T3739] usb_generic_driver_probe+0x138/0x300 [ 500.131471][ T3739] ? usb_choose_configuration+0xe70/0xe70 [ 500.137182][ T3739] usb_probe_device+0x311/0x490 [ 500.142031][ T3739] ? usb_register_device_driver+0x540/0x540 [ 500.148000][ T3739] really_probe+0xf20/0x20b0 [ 500.152584][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.157791][ T3739] driver_probe_device+0x293/0x390 [ 500.162901][ T3739] __device_attach_driver+0x63f/0x830 [ 500.168273][ T3739] bus_for_each_drv+0x2ca/0x3f0 [ 500.173117][ T3739] ? coredump_store+0xf0/0xf0 [ 500.177805][ T3739] __device_attach+0x4e2/0x7f0 [ 500.182571][ T3739] device_initial_probe+0x4a/0x60 [ 500.187586][ T3739] bus_probe_device+0x177/0x3d0 [ 500.192443][ T3739] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.198241][ T3739] device_add+0x3b0e/0x40d0 [ 500.202753][ T3739] usb_new_device+0x1bd4/0x2a30 [ 500.207609][ T3739] hub_event+0x5e7b/0x8a70 [ 500.212047][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.217237][ T3739] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.223031][ T3739] ? led_work+0x7c0/0x7c0 [ 500.227419][ T3739] process_one_work+0x1688/0x2140 [ 500.232452][ T3739] worker_thread+0x10bc/0x2730 [ 500.237225][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.242425][ T3739] kthread+0x551/0x590 [ 500.246587][ T3739] ? process_one_work+0x2140/0x2140 [ 500.251780][ T3739] ? kthread_blkcg+0x110/0x110 [ 500.256555][ T3739] ret_from_fork+0x1f/0x30 [ 500.260961][ T3739] [ 500.263300][ T3739] Local variable ----status@gp8psk_power_ctrl created at: [ 500.270407][ T3739] gp8psk_power_ctrl+0x62/0x1750 [ 500.275338][ T3739] gp8psk_power_ctrl+0x62/0x1750 [ 500.280259][ T3739] ===================================================== [ 500.287183][ T3739] Disabling lock debugging due to kernel taint [ 500.293325][ T3739] Kernel panic - not syncing: panic_on_warn set ... [ 500.299914][ T3739] CPU: 1 PID: 3739 Comm: kworker/1:2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 500.309612][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.319665][ T3739] Workqueue: usb_hub_wq hub_event [ 500.324677][ T3739] Call Trace: [ 500.327961][ T3739] dump_stack+0x21c/0x280 [ 500.332358][ T3739] panic+0x4d7/0xef7 [ 500.336260][ T3739] ? add_taint+0x17c/0x210 [ 500.340677][ T3739] kmsan_report+0x1df/0x1e0 [ 500.345177][ T3739] __msan_warning+0x58/0xa0 [ 500.349675][ T3739] gp8psk_power_ctrl+0x4dc/0x1750 [ 500.354690][ T3739] ? kasan_kmalloc+0xd/0x30 [ 500.359185][ T3739] ? __kmalloc+0x117/0x410 [ 500.363594][ T3739] ? kzalloc+0x51/0xd0 [ 500.367662][ T3739] ? gp8psk_frontend_attach+0x360/0x360 [ 500.373204][ T3739] dvb_usb_device_init+0x171e/0x3360 [ 500.378525][ T3739] gp8psk_usb_probe+0xa2/0x1a0 [ 500.383288][ T3739] ? vp702x_fe_refresh_state+0x570/0x570 [ 500.388916][ T3739] usb_probe_interface+0xece/0x1550 [ 500.394114][ T3739] ? usb_register_driver+0x900/0x900 [ 500.399393][ T3739] really_probe+0xf20/0x20b0 [ 500.403978][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.409175][ T3739] driver_probe_device+0x293/0x390 [ 500.414288][ T3739] __device_attach_driver+0x63f/0x830 [ 500.419659][ T3739] bus_for_each_drv+0x2ca/0x3f0 [ 500.424501][ T3739] ? coredump_store+0xf0/0xf0 [ 500.429175][ T3739] __device_attach+0x4e2/0x7f0 [ 500.433941][ T3739] device_initial_probe+0x4a/0x60 [ 500.438960][ T3739] bus_probe_device+0x177/0x3d0 [ 500.443808][ T3739] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.449604][ T3739] device_add+0x3b0e/0x40d0 [ 500.454116][ T3739] usb_set_configuration+0x380f/0x3f10 [ 500.459574][ T3739] ? usb_set_configuration+0xb91/0x3f10 [ 500.465131][ T3739] usb_generic_driver_probe+0x138/0x300 [ 500.470671][ T3739] ? usb_choose_configuration+0xe70/0xe70 [ 500.476378][ T3739] usb_probe_device+0x311/0x490 [ 500.481226][ T3739] ? usb_register_device_driver+0x540/0x540 [ 500.487111][ T3739] really_probe+0xf20/0x20b0 [ 500.491695][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.496898][ T3739] driver_probe_device+0x293/0x390 [ 500.502008][ T3739] __device_attach_driver+0x63f/0x830 [ 500.507381][ T3739] bus_for_each_drv+0x2ca/0x3f0 [ 500.512223][ T3739] ? coredump_store+0xf0/0xf0 [ 500.516984][ T3739] __device_attach+0x4e2/0x7f0 [ 500.521747][ T3739] device_initial_probe+0x4a/0x60 [ 500.526761][ T3739] bus_probe_device+0x177/0x3d0 [ 500.531606][ T3739] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.537406][ T3739] device_add+0x3b0e/0x40d0 [ 500.541917][ T3739] usb_new_device+0x1bd4/0x2a30 [ 500.546773][ T3739] hub_event+0x5e7b/0x8a70 [ 500.551213][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.556404][ T3739] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.562206][ T3739] ? led_work+0x7c0/0x7c0 [ 500.566526][ T3739] process_one_work+0x1688/0x2140 [ 500.571554][ T3739] worker_thread+0x10bc/0x2730 [ 500.576323][ T3739] ? kmsan_get_metadata+0x116/0x180 [ 500.581526][ T3739] kthread+0x551/0x590 [ 500.585587][ T3739] ? process_one_work+0x2140/0x2140 [ 500.590790][ T3739] ? kthread_blkcg+0x110/0x110 [ 500.595545][ T3739] ret_from_fork+0x1f/0x30 [ 500.601150][ T3739] Kernel Offset: disabled [ 500.605468][ T3739] Rebooting in 86400 seconds..