DUID 00:04:15:32:48:1d:3b:73:54:4f:46:a6:7d:b2:d0:ec:1f:b1 forked to background, child pid 3187 [ 26.196295][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.206803][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.49' (ECDSA) to the list of known hosts. 2022/07/14 00:27:52 fuzzer started 2022/07/14 00:27:52 dialing manager at 10.128.0.169:43577 syzkaller login: [ 48.133137][ T3607] cgroup: Unknown subsys name 'net' [ 48.274745][ T3607] cgroup: Unknown subsys name 'rlimit' 2022/07/14 00:27:53 syscalls: 3384 2022/07/14 00:27:53 code coverage: enabled 2022/07/14 00:27:53 comparison tracing: enabled 2022/07/14 00:27:53 extra coverage: enabled 2022/07/14 00:27:53 delay kcov mmap: enabled 2022/07/14 00:27:53 setuid sandbox: enabled 2022/07/14 00:27:53 namespace sandbox: enabled 2022/07/14 00:27:53 Android sandbox: /sys/fs/selinux/policy does not exist 2022/07/14 00:27:53 fault injection: enabled 2022/07/14 00:27:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/07/14 00:27:53 net packet injection: enabled 2022/07/14 00:27:53 net device setup: enabled 2022/07/14 00:27:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/07/14 00:27:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/07/14 00:27:53 USB emulation: enabled 2022/07/14 00:27:53 hci packet injection: enabled 2022/07/14 00:27:53 wifi device emulation: enabled 2022/07/14 00:27:53 802.15.4 emulation: enabled 2022/07/14 00:27:53 fetching corpus: 0, signal 0/2000 (executing program) 2022/07/14 00:27:53 fetching corpus: 50, signal 40860/44584 (executing program) 2022/07/14 00:27:53 fetching corpus: 100, signal 53037/58500 (executing program) 2022/07/14 00:27:53 fetching corpus: 150, signal 68079/75172 (executing program) 2022/07/14 00:27:53 fetching corpus: 200, signal 77880/86575 (executing program) 2022/07/14 00:27:53 fetching corpus: 250, signal 90748/100927 (executing program) 2022/07/14 00:27:54 fetching corpus: 299, signal 101636/113283 (executing program) 2022/07/14 00:27:54 fetching corpus: 349, signal 108241/121373 (executing program) 2022/07/14 00:27:54 fetching corpus: 399, signal 116261/130810 (executing program) 2022/07/14 00:27:54 fetching corpus: 449, signal 122500/138448 (executing program) 2022/07/14 00:27:54 fetching corpus: 499, signal 130769/148037 (executing program) 2022/07/14 00:27:54 fetching corpus: 549, signal 136207/154840 (executing program) 2022/07/14 00:27:54 fetching corpus: 599, signal 138993/159027 (executing program) 2022/07/14 00:27:54 fetching corpus: 649, signal 143270/164658 (executing program) 2022/07/14 00:27:55 fetching corpus: 699, signal 149322/171883 (executing program) 2022/07/14 00:27:55 fetching corpus: 749, signal 154751/178561 (executing program) 2022/07/14 00:27:55 fetching corpus: 799, signal 158857/183934 (executing program) 2022/07/14 00:27:55 fetching corpus: 849, signal 162979/189280 (executing program) 2022/07/14 00:27:55 fetching corpus: 899, signal 170209/197539 (executing program) 2022/07/14 00:27:55 fetching corpus: 949, signal 173668/202204 (executing program) 2022/07/14 00:27:55 fetching corpus: 998, signal 177153/206878 (executing program) 2022/07/14 00:27:55 fetching corpus: 1048, signal 179781/210748 (executing program) 2022/07/14 00:27:55 fetching corpus: 1098, signal 182617/214795 (executing program) 2022/07/14 00:27:56 fetching corpus: 1148, signal 188964/222008 (executing program) 2022/07/14 00:27:56 fetching corpus: 1198, signal 192010/226228 (executing program) 2022/07/14 00:27:56 fetching corpus: 1248, signal 195648/230931 (executing program) 2022/07/14 00:27:56 fetching corpus: 1298, signal 198373/234745 (executing program) 2022/07/14 00:27:56 fetching corpus: 1348, signal 200810/238295 (executing program) 2022/07/14 00:27:56 fetching corpus: 1398, signal 203445/242014 (executing program) 2022/07/14 00:27:56 fetching corpus: 1448, signal 205926/245576 (executing program) 2022/07/14 00:27:56 fetching corpus: 1498, signal 208387/249053 (executing program) 2022/07/14 00:27:56 fetching corpus: 1548, signal 211055/252780 (executing program) 2022/07/14 00:27:57 fetching corpus: 1598, signal 212995/255810 (executing program) 2022/07/14 00:27:57 fetching corpus: 1648, signal 216341/260073 (executing program) 2022/07/14 00:27:57 fetching corpus: 1698, signal 220005/264634 (executing program) 2022/07/14 00:27:57 fetching corpus: 1748, signal 222457/268087 (executing program) 2022/07/14 00:27:57 fetching corpus: 1798, signal 224426/271069 (executing program) 2022/07/14 00:27:57 fetching corpus: 1848, signal 226572/274183 (executing program) 2022/07/14 00:27:57 fetching corpus: 1898, signal 229611/278109 (executing program) 2022/07/14 00:27:57 fetching corpus: 1948, signal 231403/280933 (executing program) 2022/07/14 00:27:58 fetching corpus: 1998, signal 233083/283585 (executing program) 2022/07/14 00:27:58 fetching corpus: 2048, signal 235295/286717 (executing program) 2022/07/14 00:27:58 fetching corpus: 2098, signal 237483/289791 (executing program) 2022/07/14 00:27:58 fetching corpus: 2148, signal 239475/292683 (executing program) 2022/07/14 00:27:58 fetching corpus: 2198, signal 241626/295705 (executing program) 2022/07/14 00:27:58 fetching corpus: 2248, signal 243514/298470 (executing program) 2022/07/14 00:27:58 fetching corpus: 2298, signal 245582/301395 (executing program) 2022/07/14 00:27:58 fetching corpus: 2348, signal 247429/304164 (executing program) 2022/07/14 00:27:58 fetching corpus: 2398, signal 249088/306744 (executing program) 2022/07/14 00:27:59 fetching corpus: 2448, signal 251185/309709 (executing program) 2022/07/14 00:27:59 fetching corpus: 2498, signal 252787/312248 (executing program) 2022/07/14 00:27:59 fetching corpus: 2548, signal 253947/314379 (executing program) 2022/07/14 00:27:59 fetching corpus: 2598, signal 255248/316605 (executing program) 2022/07/14 00:27:59 fetching corpus: 2648, signal 257031/319237 (executing program) 2022/07/14 00:27:59 fetching corpus: 2698, signal 259898/322699 (executing program) 2022/07/14 00:27:59 fetching corpus: 2748, signal 261315/324943 (executing program) 2022/07/14 00:27:59 fetching corpus: 2798, signal 262654/327212 (executing program) 2022/07/14 00:27:59 fetching corpus: 2848, signal 264328/329645 (executing program) 2022/07/14 00:27:59 fetching corpus: 2898, signal 265883/332064 (executing program) 2022/07/14 00:28:00 fetching corpus: 2948, signal 267871/334774 (executing program) 2022/07/14 00:28:00 fetching corpus: 2998, signal 269322/337011 (executing program) 2022/07/14 00:28:00 fetching corpus: 3048, signal 270978/339438 (executing program) 2022/07/14 00:28:00 fetching corpus: 3098, signal 272844/342040 (executing program) 2022/07/14 00:28:00 fetching corpus: 3148, signal 274367/344291 (executing program) 2022/07/14 00:28:00 fetching corpus: 3198, signal 275849/346554 (executing program) 2022/07/14 00:28:00 fetching corpus: 3248, signal 277064/348594 (executing program) 2022/07/14 00:28:00 fetching corpus: 3298, signal 278761/351031 (executing program) 2022/07/14 00:28:00 fetching corpus: 3348, signal 280403/353372 (executing program) 2022/07/14 00:28:00 fetching corpus: 3398, signal 281769/355540 (executing program) 2022/07/14 00:28:01 fetching corpus: 3448, signal 283367/357836 (executing program) 2022/07/14 00:28:01 fetching corpus: 3498, signal 285264/360368 (executing program) 2022/07/14 00:28:01 fetching corpus: 3548, signal 286450/362343 (executing program) 2022/07/14 00:28:01 fetching corpus: 3598, signal 287882/364477 (executing program) 2022/07/14 00:28:01 fetching corpus: 3648, signal 289524/366766 (executing program) 2022/07/14 00:28:01 fetching corpus: 3698, signal 291148/369015 (executing program) 2022/07/14 00:28:01 fetching corpus: 3748, signal 292330/370953 (executing program) 2022/07/14 00:28:01 fetching corpus: 3798, signal 293672/372992 (executing program) 2022/07/14 00:28:02 fetching corpus: 3848, signal 294802/374884 (executing program) 2022/07/14 00:28:02 fetching corpus: 3898, signal 295872/376650 (executing program) 2022/07/14 00:28:02 fetching corpus: 3948, signal 297742/379055 (executing program) 2022/07/14 00:28:02 fetching corpus: 3998, signal 298697/380816 (executing program) 2022/07/14 00:28:02 fetching corpus: 4048, signal 299918/382711 (executing program) 2022/07/14 00:28:02 fetching corpus: 4098, signal 301308/384734 (executing program) 2022/07/14 00:28:02 fetching corpus: 4148, signal 302964/386984 (executing program) 2022/07/14 00:28:02 fetching corpus: 4198, signal 304002/388756 (executing program) 2022/07/14 00:28:02 fetching corpus: 4248, signal 305078/390534 (executing program) 2022/07/14 00:28:03 fetching corpus: 4298, signal 306413/392507 (executing program) 2022/07/14 00:28:03 fetching corpus: 4348, signal 307603/394292 (executing program) 2022/07/14 00:28:03 fetching corpus: 4397, signal 308741/396129 (executing program) 2022/07/14 00:28:03 fetching corpus: 4447, signal 310045/398031 (executing program) 2022/07/14 00:28:03 fetching corpus: 4497, signal 311405/400005 (executing program) 2022/07/14 00:28:03 fetching corpus: 4547, signal 312355/401652 (executing program) 2022/07/14 00:28:03 fetching corpus: 4597, signal 313557/403453 (executing program) 2022/07/14 00:28:03 fetching corpus: 4647, signal 314574/405107 (executing program) 2022/07/14 00:28:03 fetching corpus: 4697, signal 315559/406769 (executing program) 2022/07/14 00:28:03 fetching corpus: 4747, signal 316519/408396 (executing program) 2022/07/14 00:28:04 fetching corpus: 4797, signal 317291/409830 (executing program) 2022/07/14 00:28:04 fetching corpus: 4847, signal 318643/411633 (executing program) 2022/07/14 00:28:04 fetching corpus: 4897, signal 319300/413072 (executing program) 2022/07/14 00:28:04 fetching corpus: 4947, signal 320381/414704 (executing program) 2022/07/14 00:28:04 fetching corpus: 4997, signal 321367/416311 (executing program) 2022/07/14 00:28:04 fetching corpus: 5047, signal 322251/417844 (executing program) 2022/07/14 00:28:04 fetching corpus: 5097, signal 323224/419388 (executing program) 2022/07/14 00:28:04 fetching corpus: 5147, signal 324239/420957 (executing program) 2022/07/14 00:28:04 fetching corpus: 5197, signal 325431/422682 (executing program) 2022/07/14 00:28:05 fetching corpus: 5247, signal 327609/425017 (executing program) 2022/07/14 00:28:05 fetching corpus: 5296, signal 328901/426736 (executing program) 2022/07/14 00:28:05 fetching corpus: 5346, signal 330639/428764 (executing program) 2022/07/14 00:28:05 fetching corpus: 5395, signal 331385/430167 (executing program) 2022/07/14 00:28:05 fetching corpus: 5445, signal 332521/431759 (executing program) 2022/07/14 00:28:05 fetching corpus: 5495, signal 333660/433351 (executing program) 2022/07/14 00:28:05 fetching corpus: 5545, signal 334367/434719 (executing program) 2022/07/14 00:28:05 fetching corpus: 5595, signal 335176/436123 (executing program) 2022/07/14 00:28:06 fetching corpus: 5645, signal 336327/437770 (executing program) 2022/07/14 00:28:06 fetching corpus: 5695, signal 337393/439254 (executing program) 2022/07/14 00:28:06 fetching corpus: 5745, signal 338300/440658 (executing program) 2022/07/14 00:28:06 fetching corpus: 5795, signal 338829/441848 (executing program) 2022/07/14 00:28:06 fetching corpus: 5845, signal 339790/443278 (executing program) 2022/07/14 00:28:06 fetching corpus: 5895, signal 340772/444742 (executing program) 2022/07/14 00:28:06 fetching corpus: 5945, signal 341633/446124 (executing program) 2022/07/14 00:28:06 fetching corpus: 5995, signal 342872/447747 (executing program) 2022/07/14 00:28:07 fetching corpus: 6045, signal 344370/449522 (executing program) 2022/07/14 00:28:07 fetching corpus: 6095, signal 345221/450902 (executing program) 2022/07/14 00:28:07 fetching corpus: 6145, signal 346227/452309 (executing program) 2022/07/14 00:28:07 fetching corpus: 6195, signal 347326/453821 (executing program) 2022/07/14 00:28:07 fetching corpus: 6245, signal 348257/455228 (executing program) 2022/07/14 00:28:07 fetching corpus: 6295, signal 349149/456575 (executing program) 2022/07/14 00:28:07 fetching corpus: 6345, signal 349759/457756 (executing program) 2022/07/14 00:28:07 fetching corpus: 6395, signal 350683/459138 (executing program) 2022/07/14 00:28:07 fetching corpus: 6445, signal 351647/460575 (executing program) 2022/07/14 00:28:08 fetching corpus: 6495, signal 352863/462105 (executing program) 2022/07/14 00:28:08 fetching corpus: 6545, signal 353850/463515 (executing program) 2022/07/14 00:28:08 fetching corpus: 6595, signal 354830/464893 (executing program) 2022/07/14 00:28:08 fetching corpus: 6645, signal 355413/466004 (executing program) 2022/07/14 00:28:08 fetching corpus: 6695, signal 356138/467211 (executing program) 2022/07/14 00:28:08 fetching corpus: 6745, signal 357097/468554 (executing program) 2022/07/14 00:28:08 fetching corpus: 6795, signal 358117/469982 (executing program) 2022/07/14 00:28:08 fetching corpus: 6845, signal 359041/471346 (executing program) 2022/07/14 00:28:09 fetching corpus: 6895, signal 360060/472653 (executing program) 2022/07/14 00:28:09 fetching corpus: 6945, signal 360830/473876 (executing program) 2022/07/14 00:28:09 fetching corpus: 6995, signal 361618/475119 (executing program) 2022/07/14 00:28:09 fetching corpus: 7045, signal 362565/476407 (executing program) 2022/07/14 00:28:09 fetching corpus: 7095, signal 363351/477602 (executing program) 2022/07/14 00:28:09 fetching corpus: 7145, signal 364246/478895 (executing program) 2022/07/14 00:28:09 fetching corpus: 7195, signal 364982/480072 (executing program) 2022/07/14 00:28:09 fetching corpus: 7245, signal 365612/481210 (executing program) 2022/07/14 00:28:09 fetching corpus: 7295, signal 366273/482380 (executing program) 2022/07/14 00:28:09 fetching corpus: 7345, signal 367092/483588 (executing program) 2022/07/14 00:28:10 fetching corpus: 7395, signal 367977/484836 (executing program) 2022/07/14 00:28:10 fetching corpus: 7445, signal 368898/486088 (executing program) 2022/07/14 00:28:10 fetching corpus: 7495, signal 369485/487183 (executing program) 2022/07/14 00:28:10 fetching corpus: 7545, signal 370434/488450 (executing program) 2022/07/14 00:28:10 fetching corpus: 7595, signal 371063/489522 (executing program) 2022/07/14 00:28:10 fetching corpus: 7645, signal 372078/490832 (executing program) 2022/07/14 00:28:10 fetching corpus: 7694, signal 372994/492087 (executing program) 2022/07/14 00:28:10 fetching corpus: 7744, signal 373854/493287 (executing program) 2022/07/14 00:28:10 fetching corpus: 7794, signal 374677/494440 (executing program) 2022/07/14 00:28:11 fetching corpus: 7844, signal 375473/495536 (executing program) 2022/07/14 00:28:11 fetching corpus: 7894, signal 376236/496671 (executing program) 2022/07/14 00:28:11 fetching corpus: 7944, signal 376922/497733 (executing program) 2022/07/14 00:28:11 fetching corpus: 7994, signal 377608/498787 (executing program) 2022/07/14 00:28:11 fetching corpus: 8044, signal 378346/499890 (executing program) 2022/07/14 00:28:11 fetching corpus: 8094, signal 379126/500990 (executing program) 2022/07/14 00:28:11 fetching corpus: 8144, signal 379949/502109 (executing program) 2022/07/14 00:28:11 fetching corpus: 8194, signal 380663/503207 (executing program) 2022/07/14 00:28:11 fetching corpus: 8244, signal 381467/504309 (executing program) 2022/07/14 00:28:12 fetching corpus: 8294, signal 382104/505331 (executing program) 2022/07/14 00:28:12 fetching corpus: 8344, signal 382847/506404 (executing program) 2022/07/14 00:28:12 fetching corpus: 8394, signal 383536/507490 (executing program) 2022/07/14 00:28:12 fetching corpus: 8444, signal 384262/508505 (executing program) 2022/07/14 00:28:12 fetching corpus: 8494, signal 385146/509622 (executing program) 2022/07/14 00:28:12 fetching corpus: 8544, signal 386131/510768 (executing program) 2022/07/14 00:28:12 fetching corpus: 8594, signal 386671/511738 (executing program) 2022/07/14 00:28:12 fetching corpus: 8644, signal 387241/512709 (executing program) 2022/07/14 00:28:12 fetching corpus: 8694, signal 388058/513738 (executing program) 2022/07/14 00:28:12 fetching corpus: 8744, signal 388790/514743 (executing program) 2022/07/14 00:28:13 fetching corpus: 8794, signal 389582/515768 (executing program) 2022/07/14 00:28:13 fetching corpus: 8844, signal 390214/516768 (executing program) 2022/07/14 00:28:13 fetching corpus: 8894, signal 390822/517751 (executing program) 2022/07/14 00:28:13 fetching corpus: 8944, signal 391409/518673 (executing program) 2022/07/14 00:28:13 fetching corpus: 8994, signal 392031/519579 (executing program) 2022/07/14 00:28:13 fetching corpus: 9044, signal 392480/520477 (executing program) 2022/07/14 00:28:13 fetching corpus: 9094, signal 393067/521406 (executing program) 2022/07/14 00:28:13 fetching corpus: 9144, signal 393692/522357 (executing program) 2022/07/14 00:28:13 fetching corpus: 9194, signal 394278/523299 (executing program) 2022/07/14 00:28:14 fetching corpus: 9244, signal 394881/524231 (executing program) 2022/07/14 00:28:14 fetching corpus: 9294, signal 395508/525167 (executing program) 2022/07/14 00:28:14 fetching corpus: 9344, signal 396095/526101 (executing program) 2022/07/14 00:28:14 fetching corpus: 9394, signal 396579/527002 (executing program) 2022/07/14 00:28:14 fetching corpus: 9444, signal 397347/527900 (executing program) 2022/07/14 00:28:14 fetching corpus: 9494, signal 398045/528871 (executing program) 2022/07/14 00:28:14 fetching corpus: 9544, signal 398756/529808 (executing program) 2022/07/14 00:28:14 fetching corpus: 9594, signal 399466/530762 (executing program) 2022/07/14 00:28:15 fetching corpus: 9644, signal 400055/531658 (executing program) 2022/07/14 00:28:15 fetching corpus: 9694, signal 400547/532470 (executing program) 2022/07/14 00:28:15 fetching corpus: 9744, signal 401339/533449 (executing program) 2022/07/14 00:28:15 fetching corpus: 9794, signal 401755/534278 (executing program) 2022/07/14 00:28:15 fetching corpus: 9844, signal 402646/535259 (executing program) 2022/07/14 00:28:15 fetching corpus: 9894, signal 403210/536093 (executing program) 2022/07/14 00:28:15 fetching corpus: 9944, signal 403795/537008 (executing program) 2022/07/14 00:28:15 fetching corpus: 9994, signal 404438/537888 (executing program) 2022/07/14 00:28:15 fetching corpus: 10043, signal 404962/538713 (executing program) 2022/07/14 00:28:16 fetching corpus: 10093, signal 405885/539694 (executing program) [ 71.030264][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.036772][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 2022/07/14 00:28:16 fetching corpus: 10143, signal 406481/540551 (executing program) 2022/07/14 00:28:16 fetching corpus: 10193, signal 407244/541438 (executing program) 2022/07/14 00:28:16 fetching corpus: 10243, signal 407979/542330 (executing program) 2022/07/14 00:28:16 fetching corpus: 10293, signal 408471/543145 (executing program) 2022/07/14 00:28:16 fetching corpus: 10343, signal 409251/543963 (executing program) 2022/07/14 00:28:16 fetching corpus: 10392, signal 409925/544833 (executing program) 2022/07/14 00:28:16 fetching corpus: 10441, signal 410309/545597 (executing program) 2022/07/14 00:28:16 fetching corpus: 10490, signal 410844/546381 (executing program) 2022/07/14 00:28:17 fetching corpus: 10540, signal 411516/547251 (executing program) 2022/07/14 00:28:17 fetching corpus: 10590, signal 411998/548055 (executing program) 2022/07/14 00:28:17 fetching corpus: 10640, signal 412649/548913 (executing program) 2022/07/14 00:28:17 fetching corpus: 10690, signal 413328/549698 (executing program) 2022/07/14 00:28:17 fetching corpus: 10740, signal 413999/550568 (executing program) 2022/07/14 00:28:17 fetching corpus: 10790, signal 414747/551412 (executing program) 2022/07/14 00:28:17 fetching corpus: 10840, signal 415398/552247 (executing program) 2022/07/14 00:28:17 fetching corpus: 10888, signal 416046/553074 (executing program) 2022/07/14 00:28:17 fetching corpus: 10938, signal 416763/553910 (executing program) 2022/07/14 00:28:18 fetching corpus: 10988, signal 417277/554703 (executing program) 2022/07/14 00:28:18 fetching corpus: 11038, signal 417646/555450 (executing program) 2022/07/14 00:28:18 fetching corpus: 11088, signal 418091/556181 (executing program) 2022/07/14 00:28:18 fetching corpus: 11138, signal 418741/556936 (executing program) 2022/07/14 00:28:18 fetching corpus: 11188, signal 419199/557711 (executing program) 2022/07/14 00:28:18 fetching corpus: 11238, signal 419759/558453 (executing program) 2022/07/14 00:28:18 fetching corpus: 11288, signal 420418/559264 (executing program) 2022/07/14 00:28:18 fetching corpus: 11338, signal 420861/559982 (executing program) 2022/07/14 00:28:18 fetching corpus: 11388, signal 421390/560741 (executing program) 2022/07/14 00:28:19 fetching corpus: 11438, signal 421905/561499 (executing program) 2022/07/14 00:28:19 fetching corpus: 11488, signal 422549/562246 (executing program) 2022/07/14 00:28:19 fetching corpus: 11538, signal 423047/562974 (executing program) 2022/07/14 00:28:19 fetching corpus: 11588, signal 423409/563685 (executing program) 2022/07/14 00:28:19 fetching corpus: 11638, signal 423901/564382 (executing program) 2022/07/14 00:28:19 fetching corpus: 11688, signal 424229/565021 (executing program) 2022/07/14 00:28:19 fetching corpus: 11738, signal 424758/565726 (executing program) 2022/07/14 00:28:19 fetching corpus: 11788, signal 425438/566463 (executing program) 2022/07/14 00:28:19 fetching corpus: 11838, signal 426148/567186 (executing program) 2022/07/14 00:28:20 fetching corpus: 11888, signal 426683/567873 (executing program) 2022/07/14 00:28:20 fetching corpus: 11938, signal 427273/568590 (executing program) 2022/07/14 00:28:20 fetching corpus: 11987, signal 427822/569332 (executing program) 2022/07/14 00:28:20 fetching corpus: 12037, signal 428367/570026 (executing program) 2022/07/14 00:28:20 fetching corpus: 12087, signal 428976/570685 (executing program) 2022/07/14 00:28:20 fetching corpus: 12137, signal 429644/571371 (executing program) 2022/07/14 00:28:20 fetching corpus: 12187, signal 430094/572022 (executing program) 2022/07/14 00:28:20 fetching corpus: 12237, signal 430737/572748 (executing program) 2022/07/14 00:28:20 fetching corpus: 12287, signal 431329/573406 (executing program) 2022/07/14 00:28:21 fetching corpus: 12337, signal 431761/574055 (executing program) 2022/07/14 00:28:21 fetching corpus: 12387, signal 432257/574692 (executing program) [ 76.151364][ T6] cfg80211: failed to load regulatory.db 2022/07/14 00:28:21 fetching corpus: 12437, signal 432940/575402 (executing program) 2022/07/14 00:28:21 fetching corpus: 12487, signal 433502/576064 (executing program) 2022/07/14 00:28:21 fetching corpus: 12537, signal 434010/576675 (executing program) 2022/07/14 00:28:21 fetching corpus: 12587, signal 434471/577342 (executing program) 2022/07/14 00:28:21 fetching corpus: 12637, signal 434929/577964 (executing program) 2022/07/14 00:28:21 fetching corpus: 12687, signal 435383/578603 (executing program) 2022/07/14 00:28:21 fetching corpus: 12737, signal 435901/579215 (executing program) 2022/07/14 00:28:22 fetching corpus: 12787, signal 436365/579827 (executing program) 2022/07/14 00:28:22 fetching corpus: 12837, signal 436971/580479 (executing program) 2022/07/14 00:28:22 fetching corpus: 12887, signal 437438/581088 (executing program) 2022/07/14 00:28:22 fetching corpus: 12937, signal 437943/581687 (executing program) 2022/07/14 00:28:22 fetching corpus: 12987, signal 438571/582317 (executing program) 2022/07/14 00:28:22 fetching corpus: 13037, signal 438982/582921 (executing program) 2022/07/14 00:28:22 fetching corpus: 13087, signal 439576/583551 (executing program) 2022/07/14 00:28:22 fetching corpus: 13137, signal 440147/584154 (executing program) 2022/07/14 00:28:22 fetching corpus: 13187, signal 440799/584767 (executing program) 2022/07/14 00:28:23 fetching corpus: 13237, signal 441243/585378 (executing program) 2022/07/14 00:28:23 fetching corpus: 13287, signal 441803/585986 (executing program) 2022/07/14 00:28:23 fetching corpus: 13337, signal 442707/586649 (executing program) 2022/07/14 00:28:23 fetching corpus: 13387, signal 443091/587194 (executing program) 2022/07/14 00:28:23 fetching corpus: 13437, signal 443585/587794 (executing program) 2022/07/14 00:28:23 fetching corpus: 13487, signal 444435/588422 (executing program) 2022/07/14 00:28:23 fetching corpus: 13537, signal 445086/588995 (executing program) 2022/07/14 00:28:23 fetching corpus: 13587, signal 445587/589585 (executing program) 2022/07/14 00:28:23 fetching corpus: 13637, signal 446049/590165 (executing program) 2022/07/14 00:28:23 fetching corpus: 13687, signal 446610/590710 (executing program) 2022/07/14 00:28:24 fetching corpus: 13737, signal 447022/591285 (executing program) 2022/07/14 00:28:24 fetching corpus: 13787, signal 447541/591851 (executing program) 2022/07/14 00:28:24 fetching corpus: 13837, signal 448124/592426 (executing program) 2022/07/14 00:28:24 fetching corpus: 13887, signal 449014/593040 (executing program) 2022/07/14 00:28:24 fetching corpus: 13937, signal 449475/593606 (executing program) 2022/07/14 00:28:24 fetching corpus: 13987, signal 449992/594161 (executing program) 2022/07/14 00:28:24 fetching corpus: 14037, signal 450452/594752 (executing program) 2022/07/14 00:28:24 fetching corpus: 14087, signal 450816/595318 (executing program) 2022/07/14 00:28:24 fetching corpus: 14137, signal 451091/595800 (executing program) 2022/07/14 00:28:25 fetching corpus: 14187, signal 451553/596302 (executing program) 2022/07/14 00:28:25 fetching corpus: 14237, signal 454816/596977 (executing program) 2022/07/14 00:28:25 fetching corpus: 14287, signal 455705/597513 (executing program) 2022/07/14 00:28:25 fetching corpus: 14336, signal 456107/598030 (executing program) 2022/07/14 00:28:25 fetching corpus: 14386, signal 456577/598580 (executing program) 2022/07/14 00:28:25 fetching corpus: 14436, signal 457225/599104 (executing program) 2022/07/14 00:28:25 fetching corpus: 14486, signal 457667/599644 (executing program) 2022/07/14 00:28:25 fetching corpus: 14536, signal 458045/600144 (executing program) 2022/07/14 00:28:25 fetching corpus: 14586, signal 458482/600680 (executing program) 2022/07/14 00:28:26 fetching corpus: 14636, signal 459022/601191 (executing program) 2022/07/14 00:28:26 fetching corpus: 14686, signal 459383/601644 (executing program) 2022/07/14 00:28:26 fetching corpus: 14736, signal 459846/602150 (executing program) 2022/07/14 00:28:26 fetching corpus: 14786, signal 460247/602643 (executing program) 2022/07/14 00:28:26 fetching corpus: 14836, signal 460695/603133 (executing program) 2022/07/14 00:28:26 fetching corpus: 14886, signal 461202/603600 (executing program) 2022/07/14 00:28:26 fetching corpus: 14936, signal 462341/604063 (executing program) 2022/07/14 00:28:26 fetching corpus: 14986, signal 462696/604517 (executing program) 2022/07/14 00:28:27 fetching corpus: 15035, signal 463248/604962 (executing program) 2022/07/14 00:28:27 fetching corpus: 15084, signal 463772/605263 (executing program) 2022/07/14 00:28:27 fetching corpus: 15134, signal 464690/605266 (executing program) 2022/07/14 00:28:27 fetching corpus: 15184, signal 465037/605266 (executing program) 2022/07/14 00:28:27 fetching corpus: 15234, signal 465494/605276 (executing program) 2022/07/14 00:28:27 fetching corpus: 15282, signal 465971/605276 (executing program) 2022/07/14 00:28:27 fetching corpus: 15332, signal 466398/605276 (executing program) 2022/07/14 00:28:27 fetching corpus: 15382, signal 466829/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15432, signal 467666/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15481, signal 468313/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15531, signal 468871/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15581, signal 469381/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15631, signal 469866/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15681, signal 470281/605276 (executing program) 2022/07/14 00:28:28 fetching corpus: 15731, signal 470752/605282 (executing program) 2022/07/14 00:28:28 fetching corpus: 15781, signal 471428/605284 (executing program) 2022/07/14 00:28:29 fetching corpus: 15831, signal 472106/605284 (executing program) 2022/07/14 00:28:29 fetching corpus: 15881, signal 473620/605286 (executing program) 2022/07/14 00:28:29 fetching corpus: 15929, signal 473949/605287 (executing program) 2022/07/14 00:28:29 fetching corpus: 15979, signal 474285/605287 (executing program) 2022/07/14 00:28:29 fetching corpus: 16029, signal 474878/605287 (executing program) 2022/07/14 00:28:29 fetching corpus: 16079, signal 475341/605287 (executing program) 2022/07/14 00:28:29 fetching corpus: 16128, signal 475771/605287 (executing program) 2022/07/14 00:28:29 fetching corpus: 16178, signal 476356/605288 (executing program) 2022/07/14 00:28:29 fetching corpus: 16228, signal 476810/605288 (executing program) 2022/07/14 00:28:29 fetching corpus: 16278, signal 477206/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16328, signal 477612/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16378, signal 478091/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16428, signal 478440/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16478, signal 478920/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16528, signal 479301/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16578, signal 479682/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16628, signal 480123/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16678, signal 480531/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16728, signal 480805/605288 (executing program) 2022/07/14 00:28:30 fetching corpus: 16778, signal 481222/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 16828, signal 481623/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 16878, signal 482035/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 16928, signal 482446/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 16978, signal 482796/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 17028, signal 483212/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 17078, signal 483629/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 17128, signal 483993/605288 (executing program) 2022/07/14 00:28:31 fetching corpus: 17177, signal 484360/605290 (executing program) 2022/07/14 00:28:31 fetching corpus: 17227, signal 484700/605290 (executing program) 2022/07/14 00:28:31 fetching corpus: 17277, signal 485279/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17327, signal 485637/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17377, signal 485990/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17427, signal 486419/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17477, signal 486720/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17527, signal 487130/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17577, signal 487662/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17627, signal 488066/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17677, signal 488411/605299 (executing program) 2022/07/14 00:28:32 fetching corpus: 17727, signal 488859/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 17777, signal 489307/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 17827, signal 489659/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 17877, signal 489926/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 17927, signal 490517/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 17977, signal 490874/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 18027, signal 491302/605299 (executing program) 2022/07/14 00:28:33 fetching corpus: 18077, signal 491679/605303 (executing program) 2022/07/14 00:28:33 fetching corpus: 18127, signal 491990/605303 (executing program) 2022/07/14 00:28:33 fetching corpus: 18177, signal 492372/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18227, signal 492710/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18277, signal 493001/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18327, signal 493330/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18377, signal 493669/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18426, signal 494209/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18476, signal 494666/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18526, signal 495162/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18576, signal 495614/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18626, signal 496132/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18676, signal 496422/605303 (executing program) 2022/07/14 00:28:34 fetching corpus: 18726, signal 496803/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 18776, signal 497038/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 18826, signal 497335/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 18875, signal 497694/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 18925, signal 498109/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 18975, signal 498437/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 19025, signal 498787/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 19075, signal 499179/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 19125, signal 499476/605303 (executing program) 2022/07/14 00:28:35 fetching corpus: 19175, signal 499838/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19225, signal 500325/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19275, signal 500740/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19324, signal 501079/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19374, signal 501374/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19424, signal 501738/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19474, signal 502151/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19524, signal 502594/605303 (executing program) 2022/07/14 00:28:36 fetching corpus: 19574, signal 503147/605313 (executing program) 2022/07/14 00:28:36 fetching corpus: 19624, signal 503556/605313 (executing program) 2022/07/14 00:28:36 fetching corpus: 19673, signal 503880/605313 (executing program) 2022/07/14 00:28:36 fetching corpus: 19723, signal 504186/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 19773, signal 504479/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 19823, signal 504909/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 19873, signal 505364/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 19923, signal 505736/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 19973, signal 506012/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 20022, signal 506377/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 20072, signal 506694/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 20122, signal 507685/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 20172, signal 508003/605337 (executing program) 2022/07/14 00:28:37 fetching corpus: 20222, signal 508273/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20272, signal 508525/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20322, signal 508945/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20372, signal 509249/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20422, signal 509739/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20472, signal 510167/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20522, signal 510627/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20572, signal 511144/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20622, signal 511708/605337 (executing program) 2022/07/14 00:28:38 fetching corpus: 20672, signal 511963/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 20722, signal 512264/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 20772, signal 512553/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 20822, signal 512822/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 20871, signal 513211/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 20921, signal 513556/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 20971, signal 513783/605337 (executing program) 2022/07/14 00:28:39 fetching corpus: 21021, signal 514072/605342 (executing program) 2022/07/14 00:28:39 fetching corpus: 21071, signal 514527/605342 (executing program) 2022/07/14 00:28:39 fetching corpus: 21121, signal 514870/605342 (executing program) 2022/07/14 00:28:39 fetching corpus: 21169, signal 515176/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21219, signal 515427/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21268, signal 515821/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21318, signal 516276/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21368, signal 516549/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21418, signal 516841/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21468, signal 517112/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21518, signal 517374/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21568, signal 517679/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21618, signal 517983/605342 (executing program) 2022/07/14 00:28:40 fetching corpus: 21668, signal 518358/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 21717, signal 518716/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 21767, signal 518957/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 21817, signal 519299/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 21867, signal 519568/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 21917, signal 519895/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 21967, signal 520179/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 22017, signal 520498/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 22067, signal 520935/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 22117, signal 521366/605342 (executing program) 2022/07/14 00:28:41 fetching corpus: 22167, signal 521673/605342 (executing program) 2022/07/14 00:28:42 fetching corpus: 22217, signal 522041/605342 (executing program) 2022/07/14 00:28:42 fetching corpus: 22267, signal 522312/605342 (executing program) 2022/07/14 00:28:42 fetching corpus: 22317, signal 523128/605342 (executing program) 2022/07/14 00:28:42 fetching corpus: 22367, signal 523457/605342 (executing program) 2022/07/14 00:28:42 fetching corpus: 22417, signal 523769/605342 (executing program) 2022/07/14 00:28:42 fetching corpus: 22467, signal 524069/605353 (executing program) 2022/07/14 00:28:42 fetching corpus: 22516, signal 524388/605353 (executing program) 2022/07/14 00:28:42 fetching corpus: 22566, signal 524639/605353 (executing program) 2022/07/14 00:28:42 fetching corpus: 22615, signal 524906/605353 (executing program) 2022/07/14 00:28:42 fetching corpus: 22665, signal 525173/605353 (executing program) 2022/07/14 00:28:43 fetching corpus: 22715, signal 525570/605353 (executing program) 2022/07/14 00:28:43 fetching corpus: 22764, signal 525882/605353 (executing program) 2022/07/14 00:28:43 fetching corpus: 22814, signal 526183/605353 (executing program) 2022/07/14 00:28:43 fetching corpus: 22864, signal 526596/605354 (executing program) 2022/07/14 00:28:43 fetching corpus: 22913, signal 526920/605354 (executing program) 2022/07/14 00:28:43 fetching corpus: 22963, signal 527146/605354 (executing program) 2022/07/14 00:28:43 fetching corpus: 23012, signal 527365/605354 (executing program) 2022/07/14 00:28:43 fetching corpus: 23061, signal 527635/605354 (executing program) 2022/07/14 00:28:43 fetching corpus: 23111, signal 527941/605354 (executing program) 2022/07/14 00:28:43 fetching corpus: 23161, signal 528331/605354 (executing program) 2022/07/14 00:28:44 fetching corpus: 23211, signal 528598/605354 (executing program) 2022/07/14 00:28:44 fetching corpus: 23261, signal 528998/605354 (executing program) 2022/07/14 00:28:44 fetching corpus: 23311, signal 529197/605354 (executing program) 2022/07/14 00:28:44 fetching corpus: 23361, signal 530074/605354 (executing program) 2022/07/14 00:28:44 fetching corpus: 23411, signal 530384/605358 (executing program) 2022/07/14 00:28:44 fetching corpus: 23460, signal 530692/605358 (executing program) 2022/07/14 00:28:44 fetching corpus: 23509, signal 530981/605358 (executing program) 2022/07/14 00:28:44 fetching corpus: 23559, signal 531397/605358 (executing program) 2022/07/14 00:28:44 fetching corpus: 23609, signal 531732/605358 (executing program) 2022/07/14 00:28:45 fetching corpus: 23659, signal 532070/605358 (executing program) 2022/07/14 00:28:45 fetching corpus: 23709, signal 532354/605358 (executing program) 2022/07/14 00:28:45 fetching corpus: 23759, signal 532669/605358 (executing program) 2022/07/14 00:28:45 fetching corpus: 23809, signal 532957/605358 (executing program) 2022/07/14 00:28:45 fetching corpus: 23859, signal 533286/605358 (executing program) 2022/07/14 00:28:45 fetching corpus: 23907, signal 533528/605359 (executing program) 2022/07/14 00:28:45 fetching corpus: 23957, signal 533786/605359 (executing program) 2022/07/14 00:28:45 fetching corpus: 24006, signal 534030/605364 (executing program) 2022/07/14 00:28:45 fetching corpus: 24056, signal 534373/605364 (executing program) 2022/07/14 00:28:46 fetching corpus: 24106, signal 534709/605365 (executing program) 2022/07/14 00:28:46 fetching corpus: 24156, signal 535006/605365 (executing program) 2022/07/14 00:28:46 fetching corpus: 24206, signal 535311/605365 (executing program) 2022/07/14 00:28:46 fetching corpus: 24256, signal 535567/605369 (executing program) 2022/07/14 00:28:46 fetching corpus: 24306, signal 535763/605369 (executing program) 2022/07/14 00:28:46 fetching corpus: 24356, signal 536055/605369 (executing program) 2022/07/14 00:28:46 fetching corpus: 24406, signal 536347/605369 (executing program) 2022/07/14 00:28:46 fetching corpus: 24456, signal 536631/605369 (executing program) 2022/07/14 00:28:47 fetching corpus: 24506, signal 536916/605369 (executing program) 2022/07/14 00:28:47 fetching corpus: 24556, signal 537175/605369 (executing program) 2022/07/14 00:28:47 fetching corpus: 24606, signal 537348/605369 (executing program) 2022/07/14 00:28:47 fetching corpus: 24656, signal 537604/605369 (executing program) 2022/07/14 00:28:47 fetching corpus: 24704, signal 537824/605373 (executing program) 2022/07/14 00:28:47 fetching corpus: 24754, signal 538113/605373 (executing program) 2022/07/14 00:28:47 fetching corpus: 24804, signal 538413/605373 (executing program) 2022/07/14 00:28:47 fetching corpus: 24854, signal 538752/605374 (executing program) 2022/07/14 00:28:47 fetching corpus: 24904, signal 539157/605374 (executing program) 2022/07/14 00:28:47 fetching corpus: 24954, signal 539434/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25004, signal 539787/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25054, signal 540192/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25103, signal 540418/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25153, signal 540670/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25203, signal 540890/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25253, signal 541168/605374 (executing program) 2022/07/14 00:28:48 fetching corpus: 25303, signal 541445/605375 (executing program) 2022/07/14 00:28:48 fetching corpus: 25353, signal 541843/605375 (executing program) 2022/07/14 00:28:48 fetching corpus: 25403, signal 542105/605375 (executing program) 2022/07/14 00:28:48 fetching corpus: 25453, signal 542425/605375 (executing program) 2022/07/14 00:28:48 fetching corpus: 25502, signal 542677/605381 (executing program) 2022/07/14 00:28:49 fetching corpus: 25552, signal 542967/605381 (executing program) 2022/07/14 00:28:49 fetching corpus: 25602, signal 545877/605381 (executing program) 2022/07/14 00:28:49 fetching corpus: 25652, signal 547304/605388 (executing program) 2022/07/14 00:28:49 fetching corpus: 25702, signal 547583/605388 (executing program) 2022/07/14 00:28:49 fetching corpus: 25752, signal 547873/605388 (executing program) 2022/07/14 00:28:49 fetching corpus: 25802, signal 548416/605388 (executing program) 2022/07/14 00:28:49 fetching corpus: 25852, signal 548669/605388 (executing program) 2022/07/14 00:28:49 fetching corpus: 25902, signal 548986/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 25952, signal 549273/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26002, signal 549666/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26052, signal 549862/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26102, signal 550152/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26152, signal 550446/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26202, signal 550699/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26252, signal 550964/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26302, signal 551251/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26352, signal 551504/605388 (executing program) 2022/07/14 00:28:50 fetching corpus: 26402, signal 551724/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26452, signal 552119/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26502, signal 552437/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26552, signal 552639/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26601, signal 552967/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26651, signal 553178/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26701, signal 553427/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26751, signal 553627/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26801, signal 553885/605388 (executing program) 2022/07/14 00:28:51 fetching corpus: 26851, signal 554129/605390 (executing program) 2022/07/14 00:28:52 fetching corpus: 26901, signal 554395/605390 (executing program) 2022/07/14 00:28:52 fetching corpus: 26951, signal 554644/605390 (executing program) 2022/07/14 00:28:52 fetching corpus: 27001, signal 554971/605390 (executing program) 2022/07/14 00:28:52 fetching corpus: 27051, signal 555220/605390 (executing program) 2022/07/14 00:28:52 fetching corpus: 27101, signal 555576/605390 (executing program) 2022/07/14 00:28:52 fetching corpus: 27151, signal 555875/605392 (executing program) 2022/07/14 00:28:52 fetching corpus: 27201, signal 556182/605392 (executing program) 2022/07/14 00:28:52 fetching corpus: 27251, signal 556531/605392 (executing program) 2022/07/14 00:28:52 fetching corpus: 27301, signal 556803/605392 (executing program) 2022/07/14 00:28:52 fetching corpus: 27351, signal 557046/605392 (executing program) 2022/07/14 00:28:53 fetching corpus: 27401, signal 557237/605392 (executing program) 2022/07/14 00:28:53 fetching corpus: 27451, signal 557623/605396 (executing program) 2022/07/14 00:28:53 fetching corpus: 27501, signal 557897/605396 (executing program) 2022/07/14 00:28:53 fetching corpus: 27551, signal 558242/605396 (executing program) 2022/07/14 00:28:53 fetching corpus: 27601, signal 558477/605396 (executing program) 2022/07/14 00:28:53 fetching corpus: 27649, signal 558729/605396 (executing program) 2022/07/14 00:28:53 fetching corpus: 27699, signal 559017/605396 (executing program) 2022/07/14 00:28:53 fetching corpus: 27749, signal 559243/605402 (executing program) 2022/07/14 00:28:53 fetching corpus: 27799, signal 559523/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 27849, signal 559742/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 27899, signal 560047/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 27949, signal 560298/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 27999, signal 560848/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 28049, signal 561062/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 28098, signal 561277/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 28148, signal 561557/605402 (executing program) 2022/07/14 00:28:54 fetching corpus: 28196, signal 561849/605403 (executing program) 2022/07/14 00:28:54 fetching corpus: 28246, signal 562105/605403 (executing program) 2022/07/14 00:28:55 fetching corpus: 28295, signal 562325/605403 (executing program) 2022/07/14 00:28:55 fetching corpus: 28345, signal 562536/605408 (executing program) 2022/07/14 00:28:55 fetching corpus: 28395, signal 562800/605408 (executing program) 2022/07/14 00:28:55 fetching corpus: 28445, signal 563082/605408 (executing program) 2022/07/14 00:28:55 fetching corpus: 28495, signal 563308/605408 (executing program) 2022/07/14 00:28:55 fetching corpus: 28544, signal 563607/605412 (executing program) 2022/07/14 00:28:55 fetching corpus: 28594, signal 563827/605412 (executing program) 2022/07/14 00:28:55 fetching corpus: 28644, signal 564330/605412 (executing program) 2022/07/14 00:28:55 fetching corpus: 28694, signal 564647/605421 (executing program) 2022/07/14 00:28:55 fetching corpus: 28744, signal 565016/605421 (executing program) 2022/07/14 00:28:55 fetching corpus: 28794, signal 565254/605421 (executing program) 2022/07/14 00:28:56 fetching corpus: 28843, signal 565480/605421 (executing program) 2022/07/14 00:28:56 fetching corpus: 28893, signal 565723/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 28943, signal 565993/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 28992, signal 566199/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 29042, signal 566424/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 29092, signal 566626/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 29142, signal 566806/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 29192, signal 567104/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 29242, signal 567332/605426 (executing program) 2022/07/14 00:28:56 fetching corpus: 29292, signal 567611/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29342, signal 567883/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29392, signal 568213/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29441, signal 568561/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29491, signal 568797/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29541, signal 568989/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29591, signal 569208/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29641, signal 569590/605426 (executing program) 2022/07/14 00:28:57 fetching corpus: 29691, signal 569822/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 29741, signal 570014/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 29790, signal 570264/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 29838, signal 570496/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 29888, signal 570745/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 29937, signal 571020/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 29986, signal 571241/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 30036, signal 571527/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 30086, signal 571873/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 30136, signal 572176/605426 (executing program) 2022/07/14 00:28:58 fetching corpus: 30185, signal 572369/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30235, signal 572616/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30285, signal 572948/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30335, signal 573193/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30385, signal 573459/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30435, signal 573695/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30485, signal 573940/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30535, signal 574237/605426 (executing program) 2022/07/14 00:28:59 fetching corpus: 30584, signal 574442/605427 (executing program) 2022/07/14 00:28:59 fetching corpus: 30634, signal 574732/605427 (executing program) 2022/07/14 00:29:00 fetching corpus: 30684, signal 575034/605427 (executing program) 2022/07/14 00:29:00 fetching corpus: 30732, signal 575233/605427 (executing program) 2022/07/14 00:29:00 fetching corpus: 30782, signal 575450/605427 (executing program) 2022/07/14 00:29:00 fetching corpus: 30832, signal 575718/605427 (executing program) 2022/07/14 00:29:00 fetching corpus: 30882, signal 575992/605427 (executing program) 2022/07/14 00:29:00 fetching corpus: 30931, signal 576174/605429 (executing program) 2022/07/14 00:29:00 fetching corpus: 30980, signal 576430/605435 (executing program) 2022/07/14 00:29:00 fetching corpus: 31030, signal 576684/605435 (executing program) 2022/07/14 00:29:00 fetching corpus: 31080, signal 577032/605435 (executing program) 2022/07/14 00:29:01 fetching corpus: 31130, signal 577231/605435 (executing program) 2022/07/14 00:29:01 fetching corpus: 31179, signal 577464/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31229, signal 577675/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31278, signal 577903/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31328, signal 578187/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31378, signal 578848/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31427, signal 579174/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31477, signal 579382/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31527, signal 579599/605437 (executing program) 2022/07/14 00:29:01 fetching corpus: 31576, signal 579860/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31626, signal 580102/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31675, signal 580304/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31725, signal 580540/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31775, signal 580764/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31825, signal 580908/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31875, signal 581085/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31925, signal 581292/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 31975, signal 581546/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 32025, signal 581801/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 32074, signal 582046/605437 (executing program) 2022/07/14 00:29:02 fetching corpus: 32124, signal 582290/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32174, signal 582552/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32223, signal 582750/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32273, signal 583047/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32323, signal 583300/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32373, signal 583529/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32423, signal 583774/605437 (executing program) 2022/07/14 00:29:03 fetching corpus: 32472, signal 583967/605446 (executing program) 2022/07/14 00:29:03 fetching corpus: 32522, signal 584200/605448 (executing program) 2022/07/14 00:29:04 fetching corpus: 32570, signal 584407/605448 (executing program) 2022/07/14 00:29:04 fetching corpus: 32618, signal 584700/605448 (executing program) 2022/07/14 00:29:04 fetching corpus: 32668, signal 584926/605448 (executing program) 2022/07/14 00:29:04 fetching corpus: 32718, signal 585108/605449 (executing program) 2022/07/14 00:29:04 fetching corpus: 32768, signal 585349/605449 (executing program) 2022/07/14 00:29:04 fetching corpus: 32817, signal 585642/605449 (executing program) 2022/07/14 00:29:04 fetching corpus: 32866, signal 585909/605449 (executing program) 2022/07/14 00:29:04 fetching corpus: 32916, signal 586225/605449 (executing program) 2022/07/14 00:29:04 fetching corpus: 32966, signal 586450/605449 (executing program) 2022/07/14 00:29:04 fetching corpus: 33016, signal 586680/605449 (executing program) 2022/07/14 00:29:05 fetching corpus: 33066, signal 586898/605449 (executing program) 2022/07/14 00:29:05 fetching corpus: 33115, signal 587139/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33163, signal 587395/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33213, signal 587655/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33263, signal 588047/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33313, signal 588276/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33363, signal 588480/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33413, signal 588734/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33463, signal 588949/605450 (executing program) 2022/07/14 00:29:05 fetching corpus: 33512, signal 589150/605450 (executing program) 2022/07/14 00:29:06 fetching corpus: 33561, signal 589465/605450 (executing program) 2022/07/14 00:29:06 fetching corpus: 33611, signal 589668/605450 (executing program) 2022/07/14 00:29:06 fetching corpus: 33661, signal 589878/605450 (executing program) 2022/07/14 00:29:06 fetching corpus: 33711, signal 590093/605458 (executing program) 2022/07/14 00:29:06 fetching corpus: 33760, signal 590289/605458 (executing program) 2022/07/14 00:29:06 fetching corpus: 33810, signal 590505/605459 (executing program) 2022/07/14 00:29:06 fetching corpus: 33860, signal 590783/605459 (executing program) 2022/07/14 00:29:06 fetching corpus: 33909, signal 590978/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 33959, signal 591175/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34009, signal 591431/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34059, signal 591671/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34109, signal 591893/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34159, signal 592139/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34208, signal 592411/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34258, signal 592586/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34308, signal 592841/605459 (executing program) 2022/07/14 00:29:07 fetching corpus: 34358, signal 593033/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34408, signal 593220/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34455, signal 593398/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34505, signal 593581/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34555, signal 593781/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34605, signal 594019/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34655, signal 594224/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34705, signal 594374/605459 (executing program) 2022/07/14 00:29:08 fetching corpus: 34755, signal 594588/605462 (executing program) 2022/07/14 00:29:08 fetching corpus: 34805, signal 594770/605462 (executing program) 2022/07/14 00:29:08 fetching corpus: 34855, signal 594950/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 34905, signal 595107/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 34955, signal 595318/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 35005, signal 595520/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 35055, signal 595704/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 35105, signal 595935/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 35155, signal 596176/605462 (executing program) 2022/07/14 00:29:09 fetching corpus: 35203, signal 596410/605467 (executing program) 2022/07/14 00:29:09 fetching corpus: 35252, signal 596576/605467 (executing program) 2022/07/14 00:29:09 fetching corpus: 35302, signal 596789/605467 (executing program) 2022/07/14 00:29:09 fetching corpus: 35352, signal 596952/605467 (executing program) 2022/07/14 00:29:09 fetching corpus: 35401, signal 597211/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35451, signal 597415/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35501, signal 597596/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35550, signal 597765/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35599, signal 597954/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35648, signal 598169/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35698, signal 598421/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35746, signal 598681/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35777, signal 598830/605467 (executing program) 2022/07/14 00:29:10 fetching corpus: 35777, signal 598830/605467 (executing program) 2022/07/14 00:29:13 starting 6 fuzzer processes 00:29:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1) 00:29:13 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x3, 0x214d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7, 0xf2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x81, 0xb96, 0x7c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) 00:29:13 executing program 3: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902f98a5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, 0x0) 00:29:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1c, {0x1c, 0x0, "513b51bb5ef2d962e74efaef31e8f13ac081d616258100584358"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:29:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1f}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x38}}, 0x0) [ 129.594562][ T3636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.602790][ T3636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.610622][ T3636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.619384][ T3636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.626630][ T3636] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.633975][ T3636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.728461][ T3644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.737730][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.746192][ T3644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.746490][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.763163][ T3645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.770834][ T3645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.778002][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.785890][ T3645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.793503][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.801851][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.810051][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.817502][ T3638] chnl_net:caif_netlink_parms(): no params data found [ 129.817659][ T3645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.831474][ T3645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.838606][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.846130][ T3645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.854038][ T3645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.858525][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.861490][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.871132][ T3649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.875341][ T3645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.882554][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.898996][ T3645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.906745][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.930762][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.020078][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.027154][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.035691][ T3638] device bridge_slave_0 entered promiscuous mode [ 130.046534][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.053665][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.061389][ T3638] device bridge_slave_1 entered promiscuous mode [ 130.110254][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.135292][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.187263][ T3638] team0: Port device team_slave_0 added [ 130.211328][ T3638] team0: Port device team_slave_1 added [ 130.257317][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.264565][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.291204][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.340999][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.347971][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.373962][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.410336][ T3653] chnl_net:caif_netlink_parms(): no params data found [ 130.438307][ T3654] chnl_net:caif_netlink_parms(): no params data found [ 130.448963][ T3655] chnl_net:caif_netlink_parms(): no params data found [ 130.496321][ T3638] device hsr_slave_0 entered promiscuous mode [ 130.503028][ T3638] device hsr_slave_1 entered promiscuous mode [ 130.576376][ T3657] chnl_net:caif_netlink_parms(): no params data found [ 130.629883][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.636982][ T3653] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.645220][ T3653] device bridge_slave_0 entered promiscuous mode [ 130.667535][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.676088][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.684690][ T3655] device bridge_slave_0 entered promiscuous mode [ 130.701363][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.708774][ T3653] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.716473][ T3653] device bridge_slave_1 entered promiscuous mode [ 130.735187][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.743034][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.752184][ T3655] device bridge_slave_1 entered promiscuous mode [ 130.767448][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.774827][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.783359][ T3654] device bridge_slave_0 entered promiscuous mode [ 130.795690][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.804228][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.812604][ T3654] device bridge_slave_1 entered promiscuous mode [ 130.852783][ T3655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.869917][ T3653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.893204][ T3655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.916311][ T3653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.941190][ T3654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.970689][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.977770][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.986305][ T3657] device bridge_slave_0 entered promiscuous mode [ 131.003980][ T3654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.024802][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.032417][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.040338][ T3657] device bridge_slave_1 entered promiscuous mode [ 131.050127][ T3655] team0: Port device team_slave_0 added [ 131.064081][ T3653] team0: Port device team_slave_0 added [ 131.086045][ T3655] team0: Port device team_slave_1 added [ 131.100940][ T3653] team0: Port device team_slave_1 added [ 131.139358][ T3654] team0: Port device team_slave_0 added [ 131.154535][ T3654] team0: Port device team_slave_1 added [ 131.162353][ T3657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.172024][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.179521][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.205638][ T3655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.218774][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.225730][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.252598][ T3655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.284572][ T3657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.304993][ T3653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.312057][ T3653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.338580][ T3653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.376835][ T3653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.383822][ T3653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.410883][ T3653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.422918][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.430033][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.456089][ T3654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.483029][ T3655] device hsr_slave_0 entered promiscuous mode [ 131.491049][ T3655] device hsr_slave_1 entered promiscuous mode [ 131.497569][ T3655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.506768][ T3655] Cannot create hsr debugfs directory [ 131.529319][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.536274][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.562384][ T3654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.578288][ T3657] team0: Port device team_slave_0 added [ 131.587362][ T3657] team0: Port device team_slave_1 added [ 131.633197][ T3638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.669054][ T6] Bluetooth: hci0: command 0x0409 tx timeout [ 131.669203][ T3653] device hsr_slave_0 entered promiscuous mode [ 131.682336][ T3653] device hsr_slave_1 entered promiscuous mode [ 131.689129][ T3653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.696691][ T3653] Cannot create hsr debugfs directory [ 131.705827][ T3638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.717127][ T3638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.727953][ T3654] device hsr_slave_0 entered promiscuous mode [ 131.734586][ T3654] device hsr_slave_1 entered promiscuous mode [ 131.741357][ T3654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.748419][ T3636] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 131.749335][ T3654] Cannot create hsr debugfs directory [ 131.761930][ T3657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.769624][ T3657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.795905][ T3657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.833355][ T3638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.862097][ T3657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.870994][ T3657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.919646][ T3674] Bluetooth: hci2: command 0x0409 tx timeout [ 131.926776][ T3657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.988859][ T922] Bluetooth: hci5: command 0x0409 tx timeout [ 131.998330][ T3674] Bluetooth: hci4: command 0x0409 tx timeout [ 132.004386][ T3674] Bluetooth: hci3: command 0x0409 tx timeout [ 132.069629][ T3657] device hsr_slave_0 entered promiscuous mode [ 132.076538][ T3657] device hsr_slave_1 entered promiscuous mode [ 132.086803][ T3657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.106679][ T3657] Cannot create hsr debugfs directory [ 132.414562][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.467688][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.475168][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.481530][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.505175][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.514784][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.540235][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.549844][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.558770][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.566100][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.575007][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.584235][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.599705][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.606799][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.630222][ T3655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.656015][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.671742][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.702589][ T3655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.713063][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.732803][ T3655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.754517][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.764792][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.774254][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.783316][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.793986][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.802907][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.811529][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.820236][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.829088][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.840336][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.852969][ T3653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.862849][ T3655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.906625][ T3653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.929722][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.947815][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.959532][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.966972][ T3653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.998742][ T3653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.027190][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.043460][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.097254][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.114046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.136735][ T3638] device veth0_vlan entered promiscuous mode [ 133.150378][ T3654] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.176982][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.197416][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.211802][ T3638] device veth1_vlan entered promiscuous mode [ 133.232990][ T3654] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.266869][ T3657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.286506][ T3654] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.305525][ T3657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.330810][ T3654] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.351610][ T3657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.372264][ T3657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.414202][ T3655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.446511][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.454907][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.465749][ T3655] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.498165][ T3653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.505966][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.516704][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.526074][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.535063][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.543606][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.550685][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.559361][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.593866][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.602976][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.611721][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.618855][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.626668][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.635374][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.644869][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.653908][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.663140][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.674093][ T3638] device veth0_macvtap entered promiscuous mode [ 133.685388][ T3638] device veth1_macvtap entered promiscuous mode [ 133.697313][ T3653] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.717777][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.725898][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.734431][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.742870][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.752954][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.761822][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.775982][ T3678] Bluetooth: hci0: command 0x041b tx timeout [ 133.800049][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.820276][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.827961][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.837241][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.845872][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.852958][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.861287][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.870073][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.878802][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.885864][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.893690][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.902190][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.911281][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.920246][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.928936][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.937335][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.947388][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.955379][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.967994][ T3655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.982824][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.988569][ T14] Bluetooth: hci2: command 0x041b tx timeout [ 134.007167][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.016385][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.025173][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.039880][ T3638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.049752][ T3638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.058882][ T3638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.067561][ T3638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.076737][ T3678] Bluetooth: hci3: command 0x041b tx timeout [ 134.083722][ T3678] Bluetooth: hci4: command 0x041b tx timeout [ 134.094338][ T3678] Bluetooth: hci5: command 0x041b tx timeout [ 134.111094][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.122487][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.135087][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.151038][ T3654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.184737][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.194189][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.203135][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.211855][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.220593][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.227993][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.235868][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.244291][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.261850][ T3655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.300469][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.332213][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.341103][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.352353][ T3654] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.385956][ T3657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.395812][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.407865][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.457139][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.466751][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.476763][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.483913][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.492298][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.501748][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.510527][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.517612][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.525750][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.534646][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.544083][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.552947][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.561795][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.569544][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.576977][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.585577][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.602393][ T3655] device veth0_vlan entered promiscuous mode [ 134.617480][ T3653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.628702][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.636703][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.637622][ T3654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.661534][ T3654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.677489][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.686846][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.695043][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.703371][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.714843][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.724231][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.733323][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.741967][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.752010][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.760409][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.769435][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.777636][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.786013][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.794394][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.803576][ T3657] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.824208][ T3655] device veth1_vlan entered promiscuous mode [ 134.845969][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.856194][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.865622][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.875159][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.884581][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.891690][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.923354][ T3654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.950619][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.959175][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.967670][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.976515][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.983647][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.991302][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.000381][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.007760][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.015357][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.024029][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.033455][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.041879][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.051379][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.079586][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.087942][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.088990][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.104361][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.113927][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.122882][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.130779][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.139803][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.161611][ T3653] device veth0_vlan entered promiscuous mode [ 135.203589][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.219383][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.233898][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.243081][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.251749][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.260334][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.268889][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.277248][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.286015][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.294845][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.303896][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.311933][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.319999][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.327628][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.336245][ T3653] device veth1_vlan entered promiscuous mode [ 135.350581][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.366166][ T3655] device veth0_macvtap entered promiscuous mode [ 135.375570][ T3654] device veth0_vlan entered promiscuous mode [ 135.402572][ T3655] device veth1_macvtap entered promiscuous mode [ 135.423265][ T3685] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 135.450470][ T3685] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 135.481587][ T3654] device veth1_vlan entered promiscuous mode [ 135.498767][ T3685] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 135.520940][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 00:29:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 00:29:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00'}) [ 135.537741][ T3685] syz-executor.0 (3685) used greatest stack depth: 22352 bytes left [ 135.564305][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.573393][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.582325][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.590715][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.598739][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.606191][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.637179][ T3657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.657105][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.666523][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.676022][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 00:29:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x7, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 00:29:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000011c0)={'#! ', './file0', [{0x20, 'io.stat\x00'}, {0x20, 'io.stat\x00'}, {0x20, '$\xb7*-+,*+'}, {0x20, 'io.stat\x00'}, {0x20, 'io.stat\x00'}], 0xa, "2c597836460bc7c588"}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x2, 0x0, &(0x7f0000000040)) [ 135.694427][ T3653] device veth0_macvtap entered promiscuous mode [ 135.705348][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.728438][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.747998][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.773279][ T3644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.786490][ T3644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 00:29:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) [ 135.795281][ T3654] device veth0_macvtap entered promiscuous mode [ 135.801902][ T3644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.814964][ T3653] device veth1_macvtap entered promiscuous mode [ 135.819937][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.823075][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.829550][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.836719][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.843091][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.852415][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.875862][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.885291][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.899331][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.909823][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.920995][ T14] Bluetooth: hci0: command 0x040f tx timeout [ 135.928451][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.943855][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.959544][ T3654] device veth1_macvtap entered promiscuous mode [ 135.975348][ T3697] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.986771][ T3697] team0: Port device batadv1 added 00:29:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) [ 135.994120][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.010776][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.019459][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.028448][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.037357][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.046668][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.071961][ T3678] Bluetooth: hci2: command 0x040f tx timeout [ 136.104481][ T3699] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 136.112298][ T3699] team0: Port device batadv2 added 00:29:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) [ 136.123024][ T3655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.142310][ T3655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.151719][ T6] Bluetooth: hci5: command 0x040f tx timeout [ 136.157766][ T6] Bluetooth: hci4: command 0x040f tx timeout [ 136.169982][ T6] Bluetooth: hci3: command 0x040f tx timeout [ 136.178524][ T3655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.187249][ T3655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.214459][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.225421][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.235772][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.250141][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.263361][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.272002][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.281005][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.294985][ T3701] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 136.304163][ T3701] team0: Port device batadv3 added [ 136.353836][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.367690][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.377767][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.386047][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.403501][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.414529][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.425015][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.435710][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.445843][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.456517][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.470068][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.479835][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.492057][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.505237][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.515828][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.528483][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.535982][ T3657] device veth0_vlan entered promiscuous mode [ 136.552610][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.568674][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.577494][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.586863][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.596968][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.608708][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.618752][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.630417][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.640351][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.650840][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.662839][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.673171][ T3653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.683043][ T3653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.692051][ T3653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.701274][ T3653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.718762][ T3657] device veth1_vlan entered promiscuous mode [ 136.730042][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.737922][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.747535][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.759694][ T3654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.768606][ T3654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.777457][ T3654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.787315][ T3654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.868459][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.887077][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.924339][ T3657] device veth0_macvtap entered promiscuous mode [ 136.943393][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.951715][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.959872][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.969931][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.978985][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.987221][ T3695] chnl_net:caif_netlink_parms(): no params data found [ 137.008031][ T3657] device veth1_macvtap entered promiscuous mode [ 137.065069][ T2420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.086656][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.087679][ T2420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.112154][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.123269][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.133821][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.144069][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.157419][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.168772][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.179452][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.193518][ T3657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.219197][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.230681][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.240826][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.249532][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.275567][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.288880][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.302539][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.313135][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.323228][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.334256][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.344120][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.355996][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.367209][ T3657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.413300][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.422984][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.432441][ T3695] device bridge_slave_0 entered promiscuous mode [ 137.441253][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.450123][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.462497][ T3657] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.471782][ T3657] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.480722][ T3657] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.490337][ T3657] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.514632][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.528259][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.535356][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.550856][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.555555][ T3695] device bridge_slave_1 entered promiscuous mode [ 137.581283][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.635856][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.656023][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.734959][ T3695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.752947][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.783532][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.786206][ T3695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.828965][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.860083][ T3683] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 137.885215][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.894753][ T3695] team0: Port device team_slave_0 added [ 137.917143][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.924965][ T14] Bluetooth: hci1: command 0x0409 tx timeout [ 137.948712][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.957384][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.980285][ T3695] team0: Port device team_slave_1 added [ 137.989623][ T3679] Bluetooth: hci0: command 0x0419 tx timeout [ 138.057239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.078225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.113939][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.124288][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.151804][ T3679] Bluetooth: hci2: command 0x0419 tx timeout [ 138.174140][ T3695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.219210][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.229279][ T3681] Bluetooth: hci3: command 0x0419 tx timeout [ 138.236002][ T3681] Bluetooth: hci4: command 0x0419 tx timeout [ 138.242420][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.250463][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.258210][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.298367][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.298451][ T3683] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 138.357641][ T3683] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 138.398580][ T3683] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 138.427934][ T3695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.451286][ T3683] usb 4-1: config 1 has no interface number 0 [ 138.474507][ T3683] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 138.493900][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.550280][ T3683] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.633224][ T3683] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 138.643050][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.678255][ T3676] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.683671][ T142] Bluetooth: hci5: command 0x0419 tx timeout [ 138.689402][ T3695] device hsr_slave_0 entered promiscuous mode [ 138.728844][ T3695] device hsr_slave_1 entered promiscuous mode [ 138.735158][ T3683] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 138.758362][ T3695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.765926][ T3695] Cannot create hsr debugfs directory [ 138.950487][ T3683] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 138.982110][ T3695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.999019][ T3695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.007960][ T3695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.027114][ T3695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.058285][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.069779][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.081512][ T3676] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 [ 139.090701][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.102078][ T3676] usb 5-1: config 0 descriptor?? [ 139.155846][ T3695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.156605][ T3683] usb 4-1: USB disconnect, device number 2 [ 139.174246][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.183353][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.193021][ T3683] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 139.202876][ T3695] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.219431][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.236481][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.245123][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.252441][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.279934][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.289633][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.298366][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.306796][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.313914][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.322167][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.331200][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.357240][ T3695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.370887][ T3695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.384969][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.394176][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.402903][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.411726][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.420422][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.429286][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.448288][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.455875][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.464644][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.477073][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.490532][ T3695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.519715][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.529943][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.552717][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.561853][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.572867][ T3695] device veth0_vlan entered promiscuous mode [ 139.587213][ T3676] uclogic 0003:5543:0005.0001: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 139.600063][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.607765][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.623452][ T3695] device veth1_vlan entered promiscuous mode 00:29:24 executing program 3: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902f98a5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, 0x0) [ 139.658587][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.666793][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.676582][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.686631][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.701535][ T3695] device veth0_macvtap entered promiscuous mode [ 139.744599][ T3695] device veth1_macvtap entered promiscuous mode [ 139.767654][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.778321][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.794205][ T6] usb 5-1: USB disconnect, device number 2 [ 139.801783][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.814043][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.827728][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.840694][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.855188][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.865839][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.875959][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.886685][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.899028][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.911406][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.920499][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.929167][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.937916][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.955350][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.968020][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.978209][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.989604][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.999065][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 139.999919][ T3678] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 140.013513][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 140.024260][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.034425][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 140.046833][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.057434][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 140.071840][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.083395][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.092644][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.103928][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.114936][ T3695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.124726][ T3695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.133576][ T3695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.142681][ T3695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.274753][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.301969][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.325309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.334365][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.345921][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.366143][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.389330][ T3678] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 140.397708][ T3678] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 140.416380][ T3678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 140.437566][ T3678] usb 4-1: config 1 has no interface number 0 [ 140.445297][ T3678] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 140.459745][ T3678] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 140.473135][ T3678] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 00:29:25 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x3, 0x214d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7, 0xf2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x81, 0xb96, 0x7c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 00:29:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) 00:29:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) 00:29:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1c, {0x1c, 0x0, "513b51bb5ef2d962e74efaef31e8f13ac081d616258100584358"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 140.482341][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.545493][ T3678] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found 00:29:25 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x3, 0x214d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7, 0xf2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x81, 0xb96, 0x7c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) close_range(r0, 0xffffffffffffffff, 0x0) [ 140.614960][ T3734] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 140.646916][ T3734] team0: Port device batadv4 added [ 140.759152][ T3678] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 140.838219][ T3702] usb 5-1: new high-speed USB device number 3 using dummy_hcd 00:29:26 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x3, 0x214d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7, 0xf2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x81, 0xb96, 0x7c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000f, 0x12, r0, 0x46c65000) [ 141.070110][ T3678] usb 4-1: USB disconnect, device number 3 [ 141.079808][ T3678] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected 00:29:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001180)=0x1ff, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xad4, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="03032a00010000000000002cfff57b016d2763bd56373780398d5300002e2b000045a720e5ec55e0654786a70100935ba514d408", 0x34, 0x0, 0x0, 0x0) 00:29:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) [ 141.208375][ T3702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.232429][ T3702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.266066][ T3702] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 00:29:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) [ 141.314054][ T3702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.374687][ T3702] usb 5-1: config 0 descriptor?? 00:29:26 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x8, 0x3f}, './file0\x00'}) 00:29:26 executing program 3: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902f98a5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, 0x0) 00:29:26 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 00:29:26 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 141.638628][ T3769] autofs4:pid:3769:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8), cmd(0xc018937e) 00:29:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x17, &(0x7f0000000080)={r2}, 0xc) [ 141.718576][ T3769] autofs4:pid:3769:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 141.924921][ T3702] uclogic 0003:5543:0005.0002: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 141.988379][ T142] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 142.068794][ T26] Bluetooth: hci1: command 0x040f tx timeout [ 142.133208][ T3702] usb 5-1: USB disconnect, device number 3 [ 142.368252][ T142] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 142.376843][ T142] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 142.385900][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 142.395358][ T142] usb 4-1: config 1 has no interface number 0 [ 142.401837][ T142] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 142.414065][ T142] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 142.427511][ T142] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 142.436936][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.481578][ T142] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found 00:29:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1c, {0x1c, 0x0, "513b51bb5ef2d962e74efaef31e8f13ac081d616258100584358"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:29:27 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x28, 0x6, 0x0, &(0x7f0000000340)) 00:29:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) 00:29:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000004) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000200)=0x8) 00:29:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x17, &(0x7f0000000080)={r2}, 0xc) 00:29:27 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, &(0x7f00000004c0)={0x0, 0x100080}, 0x20) [ 142.718962][ T142] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached 00:29:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202010002020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1227055d", @ANYRES16=r5, @ANYRES64, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x4, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8000}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r8, r7, 0x0, 0x800000017fc) [ 142.948842][ T3702] usb 4-1: USB disconnect, device number 4 [ 142.969807][ T3702] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 143.008555][ T142] usb 5-1: new high-speed USB device number 4 using dummy_hcd 00:29:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202010002020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1227055d", @ANYRES16=r5, @ANYRES64, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x4, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8000}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r8, r7, 0x0, 0x800000017fc) [ 143.379711][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.410733][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:29:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000012c0)=0x9) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) 00:29:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x1000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/245, 0xf5}, {0x0}], 0x4, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="035ee169d022cd44b46e2820bede129a05072abd708b385bf120413426b7a206976d", @ANYBLOB="0800c40000000000"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000005c0)=""/14, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2000000}], 0x40000000000017f, 0x0) 00:29:28 executing program 3: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902f98a5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, 0x0) [ 143.429591][ T142] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 [ 143.439274][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.450478][ T142] usb 5-1: config 0 descriptor?? 00:29:28 executing program 2: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) [ 143.849177][ T3702] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 143.928309][ T3676] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 143.936589][ T142] uclogic 0003:5543:0005.0003: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 144.148390][ T142] Bluetooth: hci1: command 0x0419 tx timeout [ 144.163090][ T142] usb 5-1: USB disconnect, device number 4 [ 144.238603][ T3702] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 144.249883][ T3702] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 144.258792][ T3702] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 144.267864][ T3702] usb 4-1: config 1 has no interface number 0 [ 144.274343][ T3702] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 144.285555][ T3702] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 144.299148][ T3702] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 144.309143][ T3702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.348522][ T3676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 144.361227][ T3676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.373848][ T3702] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 144.380156][ T3676] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.389547][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.400446][ T3676] usb 3-1: config 0 descriptor?? [ 144.579151][ T3702] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached 00:29:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1c, {0x1c, 0x0, "513b51bb5ef2d962e74efaef31e8f13ac081d616258100584358"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:29:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202010002020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1227055d", @ANYRES16=r5, @ANYRES64, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x4, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8000}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r8, r7, 0x0, 0x800000017fc) [ 144.666706][ T3676] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.683138][ T3676] usb 3-1: USB disconnect, device number 2 00:29:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x17, &(0x7f0000000080)={r2}, 0xc) 00:29:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x1000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/245, 0xf5}, {0x0}], 0x4, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="035ee169d022cd44b46e2820bede129a05072abd708b385bf120413426b7a206976d", @ANYBLOB="0800c40000000000"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000005c0)=""/14, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2000000}], 0x40000000000017f, 0x0) [ 144.709982][ T3676] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 144.833438][ T3683] usb 4-1: USB disconnect, device number 5 [ 144.844144][ T3683] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected 00:29:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202010002020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1227055d", @ANYRES16=r5, @ANYRES64, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x4, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8000}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r8, r7, 0x0, 0x800000017fc) [ 145.058711][ T3678] usb 5-1: new high-speed USB device number 5 using dummy_hcd 00:29:30 executing program 2: r0 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 00:29:30 executing program 2: r0 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 00:29:30 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) 00:29:30 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0xc4402) [ 145.488916][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:29:30 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 145.544156][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.582038][ T3678] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 00:29:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x17, &(0x7f0000000080)={r2}, 0xc) 00:29:30 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) [ 145.615397][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.686371][ T3678] usb 5-1: config 0 descriptor?? [ 146.181989][ T3678] uclogic 0003:5543:0005.0004: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 146.392686][ T3678] usb 5-1: USB disconnect, device number 5 00:29:31 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) 00:29:31 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) 00:29:31 executing program 2: r0 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 00:29:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x1000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/245, 0xf5}, {0x0}], 0x4, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="035ee169d022cd44b46e2820bede129a05072abd708b385bf120413426b7a206976d", @ANYBLOB="0800c40000000000"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000005c0)=""/14, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2000000}], 0x40000000000017f, 0x0) 00:29:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x9bc}) 00:29:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0xc008ae91, 0x0) 00:29:32 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) 00:29:32 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) 00:29:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x610, 0x210, 0x140, 0x370, 0x0, 0x210, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x11e, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@mcast2, 0x3b}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private1, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) [ 147.058566][ T3862] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:29:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) 00:29:32 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0/bus\x00', 0x0) link(&(0x7f0000000140)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/bus\x00', 0x0) 00:29:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008108040f80ecdb4cb92e0a480e600f000000e8bd6efb250314000e000100250248ff050005001200", 0x2e}], 0x1}, 0x0) 00:29:32 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:29:32 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 00:29:32 executing program 2: r0 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = io_uring_setup(0x6388, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 00:29:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x1000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/245, 0xf5}, {0x0}], 0x4, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="035ee169d022cd44b46e2820bede129a05072abd708b385bf120413426b7a206976d", @ANYBLOB="0800c40000000000"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000005c0)=""/14, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2000000}], 0x40000000000017f, 0x0) 00:29:32 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:29:32 executing program 0: r0 = add_key$keyring(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000003480), &(0x7f00000034c0)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000036c0)='rxrpc\x00', &(0x7f0000003700)={'syz', 0x1}, 0x0, r1) 00:29:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x2, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:29:32 executing program 1: r0 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:29:32 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 00:29:32 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x94) 00:29:32 executing program 3: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 00:29:32 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 00:29:32 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:29:33 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:29:33 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) [ 148.318299][ T142] usb 1-1: new full-speed USB device number 2 using dummy_hcd 00:29:33 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0xffff) r0 = socket$inet(0x2, 0x3, 0x72) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x0, @private, 0x0, 0x0, 'none\x00'}, 0x2c) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80000) 00:29:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xc7, 0x37, 0xa6, 0x10, 0x46d, 0x896, 0x76bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8a, 0x60, 0xae}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:29:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="00000000000000fb08000a0010"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 00:29:33 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 00:29:33 executing program 5: syz_emit_ethernet(0x92, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "440359", 0x5c, 0x3c, 0x0, @dev, @mcast1={0xff, 0x2}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @calipso={0x7, 0x8}]}]}}}}}, 0x0) 00:29:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 148.557586][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:29:33 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0xffff) r0 = socket$inet(0x2, 0x3, 0x72) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x0, @private, 0x0, 0x0, 'none\x00'}, 0x2c) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80000) [ 148.604665][ T3915] team0: Device veth0_to_batadv is up. Set it down before adding it as a team port [ 148.605228][ T3919] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 148.621316][ T3922] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 00:29:33 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0xffff) r0 = socket$inet(0x2, 0x3, 0x72) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x0, @private, 0x0, 0x0, 'none\x00'}, 0x2c) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80000) [ 148.667683][ T3925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 148.698745][ T142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.769455][ T3928] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 148.778328][ T142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 148.801246][ T142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 148.812464][ T142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 148.838594][ T3683] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.979551][ T142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.993248][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.016094][ T142] usb 1-1: Product: syz [ 149.025260][ T142] usb 1-1: Manufacturer: syz [ 149.043504][ T142] usb 1-1: SerialNumber: syz [ 149.078669][ T3906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.086247][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 149.358440][ T142] cdc_ncm 1-1:1.0: bind() failure [ 149.378266][ T3683] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=76.bd [ 149.388993][ T142] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 149.400467][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.414240][ T142] cdc_ncm 1-1:1.1: bind() failure [ 149.424696][ T3683] usb 4-1: Product: syz [ 149.439188][ T142] usb 1-1: USB disconnect, device number 2 [ 149.446541][ T3683] usb 4-1: Manufacturer: syz [ 149.457200][ T3683] usb 4-1: SerialNumber: syz [ 149.492189][ T3683] usb 4-1: config 0 descriptor?? [ 149.530878][ T3683] gspca_main: vc032x-2.14.0 probing 046d:0896 00:29:34 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 00:29:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x9c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x9c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff130700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468315f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x8, 0x35b86}, 0x0) 00:29:34 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0xffff) r0 = socket$inet(0x2, 0x3, 0x72) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x0, @private, 0x0, 0x0, 'none\x00'}, 0x2c) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80000) 00:29:34 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 00:29:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 149.868611][ T3936] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 149.883943][ T3935] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 150.168148][ T142] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.188385][ T3683] gspca_vc032x: reg_r err -71 [ 150.193488][ T3683] vc032x: probe of 4-1:0.0 failed with error -71 [ 150.209658][ T3683] usb 4-1: USB disconnect, device number 6 [ 150.548414][ T142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.568443][ T142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 150.592426][ T142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 150.614304][ T142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 00:29:35 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 00:29:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 00:29:35 executing program 4: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 00:29:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 150.788542][ T142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.820775][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.870295][ T142] usb 1-1: Product: syz [ 150.882387][ T142] usb 1-1: Manufacturer: syz [ 150.892551][ T142] usb 1-1: SerialNumber: syz [ 150.918414][ T3940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 00:29:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 151.048367][ T3683] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 151.055909][ T26] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 151.218277][ T142] cdc_ncm 1-1:1.0: bind() failure [ 151.240361][ T142] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 151.266897][ T142] cdc_ncm 1-1:1.1: bind() failure [ 151.333824][ T142] usb 1-1: USB disconnect, device number 3 [ 151.438405][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.449598][ T3683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.470709][ T3683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 151.471002][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 151.493859][ T3683] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.508795][ T3683] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 151.520272][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.534995][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 151.689216][ T3683] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.708656][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.717796][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:29:36 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 151.738211][ T3683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.762043][ T3683] usb 2-1: Product: syz [ 151.770090][ T26] usb 5-1: Product: syz [ 151.777677][ T3683] usb 2-1: Manufacturer: syz [ 151.806654][ T26] usb 5-1: Manufacturer: syz [ 151.820586][ T3683] usb 2-1: SerialNumber: syz [ 151.827794][ T26] usb 5-1: SerialNumber: syz [ 151.898588][ T3947] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 151.928481][ T3946] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.158287][ T3683] cdc_ncm 2-1:1.0: bind() failure [ 152.178201][ T3674] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 152.186440][ T3683] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 152.193463][ T26] cdc_ncm 5-1:1.0: bind() failure [ 152.203574][ T26] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 152.248557][ T3683] cdc_ncm 2-1:1.1: bind() failure [ 152.270533][ T26] cdc_ncm 5-1:1.1: bind() failure 00:29:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 00:29:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 152.317538][ T3683] usb 2-1: USB disconnect, device number 2 [ 152.339602][ T26] usb 5-1: USB disconnect, device number 6 [ 152.558525][ T3674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.601687][ T3674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 00:29:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 152.647653][ T3674] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 152.710157][ T3674] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 00:29:37 executing program 4: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 00:29:37 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 152.908706][ T3674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.987635][ T3674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.050541][ T3674] usb 1-1: Product: syz [ 153.065895][ T3674] usb 1-1: Manufacturer: syz [ 153.088478][ T3674] usb 1-1: SerialNumber: syz [ 153.138515][ T3960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.149177][ T6] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 153.268184][ T3683] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 153.438539][ T3674] cdc_ncm 1-1:1.0: bind() failure [ 153.447606][ T3674] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 153.477719][ T3674] cdc_ncm 1-1:1.1: bind() failure [ 153.547541][ T3674] usb 1-1: USB disconnect, device number 4 [ 153.558842][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.614697][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 153.638602][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.670185][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 153.715295][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 153.727203][ T3683] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 00:29:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 153.773396][ T3683] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 153.802179][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 00:29:39 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 153.958347][ T3683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.978898][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.026025][ T3683] usb 5-1: Product: syz [ 154.038530][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 00:29:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 154.070131][ T3683] usb 5-1: Manufacturer: syz [ 154.086652][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.088664][ T3683] usb 5-1: SerialNumber: syz 00:29:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) [ 154.161989][ T6] usb 2-1: Product: syz [ 154.169286][ T3974] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.194927][ T6] usb 2-1: Manufacturer: syz [ 154.230971][ T6] usb 2-1: SerialNumber: syz [ 154.328793][ T3975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 154.418261][ T3674] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 154.428549][ T3683] cdc_ncm 5-1:1.0: bind() failure [ 154.441398][ T3683] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 154.485675][ T3683] cdc_ncm 5-1:1.1: bind() failure [ 154.543805][ T3683] usb 5-1: USB disconnect, device number 7 [ 154.608259][ T6] cdc_ncm 2-1:1.0: bind() failure [ 154.633172][ T6] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 154.682401][ T6] cdc_ncm 2-1:1.1: bind() failure [ 154.748663][ T6] usb 2-1: USB disconnect, device number 3 [ 154.788377][ T3674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.810026][ T3674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 154.835654][ T3674] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 00:29:39 executing program 4: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 154.894953][ T3674] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 155.138599][ T3674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.160223][ T3674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:29:40 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x390, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm_detail={0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x24}}}}}}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000840)={0x7}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0x87, 0x75, 0x1, {0x7c, "6325a58b1304aa3727de1918e7cba125b6528d995597cbe8db34298203550d964808d9444743f1da1a38a5279e8fb5c3bbdaba534a8ec041cbe1b86518daf031d2edf53434e41d308aa8f46299ae6982ca8b7c8a5b1eeaec7108ecfdbf15340046ae87e167dc62580cac29ef4ca86a30cd9706f55df86ffca3a5e991"}}, 0x87) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 155.189010][ T3674] usb 1-1: Product: syz [ 155.213017][ T3674] usb 1-1: Manufacturer: syz [ 155.237190][ T3674] usb 1-1: SerialNumber: syz [ 155.288635][ T3981] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.378171][ T14] usb 5-1: new full-speed USB device number 8 using dummy_hcd 00:29:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b34, 0x0) 00:29:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b34, 0x0) [ 155.568248][ T3674] cdc_ncm 1-1:1.0: bind() failure [ 155.573333][ T3681] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 155.603457][ T3674] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found 00:29:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b34, 0x0) [ 155.637818][ T3674] cdc_ncm 1-1:1.1: bind() failure 00:29:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b34, 0x0) [ 155.699584][ T3674] usb 1-1: USB disconnect, device number 5 00:29:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000000005) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000020026bd7000fedbdf5001388400", @ANYRES32=0x0, @ANYBLOB="0001000000200000352b9dfeffffffc399e0a8140035006772650000000400140008001e00080000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000280)={0x1}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@initdev, @private}, &(0x7f0000000240)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) socket(0x26, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 00:29:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe) [ 155.798501][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.825754][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 00:29:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) [ 155.864366][ T14] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.927047][ T14] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 155.974763][ T6] ================================================================== [ 155.978333][ T3681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.982842][ T6] BUG: KASAN: use-after-free in kill_fasync+0x45e/0x470 [ 155.982874][ T6] Read of size 8 at addr ffff88807b8b7568 by task kworker/0:0/6 [ 156.008308][ T6] [ 156.010616][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.19.0-rc6-syzkaller-00115-g4a57a8400075 #0 [ 156.020498][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 156.030550][ T6] Workqueue: events key_garbage_collector [ 156.036283][ T6] Call Trace: [ 156.039543][ T6] [ 156.042458][ T6] dump_stack_lvl+0xcd/0x134 [ 156.047050][ T6] print_address_description.constprop.0.cold+0xeb/0x495 [ 156.054064][ T6] ? kill_fasync+0x45e/0x470 [ 156.058639][ T6] kasan_report.cold+0xf4/0x1c6 [ 156.063474][ T6] ? kill_fasync+0x45e/0x470 [ 156.068071][ T6] kill_fasync+0x45e/0x470 [ 156.072492][ T6] post_one_notification.isra.0+0x6e4/0x990 [ 156.078386][ T6] remove_watch_from_object+0x35a/0x9d0 [ 156.083953][ T6] ? __post_watch_notification+0x840/0x840 [ 156.089766][ T6] ? do_raw_spin_lock+0x120/0x2a0 [ 156.094808][ T6] key_gc_unused_keys.constprop.0+0x2e5/0x600 [ 156.100871][ T6] key_garbage_collector+0x3d7/0x920 [ 156.106164][ T6] process_one_work+0x996/0x1610 [ 156.111096][ T6] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 156.116452][ T6] ? rwlock_bug.part.0+0x90/0x90 [ 156.121418][ T6] ? _raw_spin_lock_irq+0x41/0x50 [ 156.126440][ T6] worker_thread+0x665/0x1080 [ 156.131106][ T6] ? process_one_work+0x1610/0x1610 [ 156.136295][ T6] kthread+0x2e9/0x3a0 [ 156.140353][ T6] ? kthread_complete_and_exit+0x40/0x40 [ 156.145994][ T6] ret_from_fork+0x1f/0x30 [ 156.150403][ T6] [ 156.153405][ T6] [ 156.155708][ T6] Allocated by task 4007: [ 156.160018][ T6] kasan_save_stack+0x1e/0x40 [ 156.164680][ T6] __kasan_kmalloc+0xa9/0xd0 [ 156.169256][ T6] alloc_pipe_info+0x105/0x590 [ 156.174018][ T6] create_pipe_files+0x8d/0x880 [ 156.178861][ T6] do_pipe2+0x96/0x1b0 [ 156.182914][ T6] __x64_sys_pipe2+0x50/0x70 [ 156.187485][ T6] do_syscall_64+0x35/0xb0 [ 156.191885][ T6] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.197771][ T6] [ 156.200088][ T6] Freed by task 4004: [ 156.204046][ T6] kasan_save_stack+0x1e/0x40 [ 156.208708][ T6] kasan_set_track+0x21/0x30 [ 156.213279][ T6] kasan_set_free_info+0x20/0x30 [ 156.218201][ T6] ____kasan_slab_free+0x166/0x1a0 [ 156.223297][ T6] slab_free_freelist_hook+0x8b/0x1c0 [ 156.228653][ T6] kfree+0xd6/0x4d0 [ 156.232444][ T6] pipe_release+0x2b6/0x310 [ 156.236928][ T6] __fput+0x277/0x9d0 [ 156.240891][ T6] task_work_run+0xdd/0x1a0 [ 156.245377][ T6] exit_to_user_mode_prepare+0x23c/0x250 [ 156.250990][ T6] syscall_exit_to_user_mode+0x19/0x50 [ 156.256431][ T6] do_syscall_64+0x42/0xb0 [ 156.260845][ T6] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.266725][ T6] [ 156.269042][ T6] The buggy address belongs to the object at ffff88807b8b7400 [ 156.269042][ T6] which belongs to the cache kmalloc-cg-512 of size 512 [ 156.283351][ T6] The buggy address is located 360 bytes inside of [ 156.283351][ T6] 512-byte region [ffff88807b8b7400, ffff88807b8b7600) [ 156.297039][ T6] [ 156.299343][ T6] The buggy address belongs to the physical page: [ 156.305729][ T6] page:ffffea0001ee2d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b8b4 [ 156.315871][ T6] head:ffffea0001ee2d00 order:2 compound_mapcount:0 compound_pincount:0 [ 156.324173][ T6] memcg:ffff88801fb24001 [ 156.328386][ T6] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 156.336349][ T6] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888011842dc0 [ 156.344915][ T6] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88801fb24001 [ 156.353472][ T6] page dumped because: kasan: bad access detected [ 156.359875][ T6] page_owner tracks the page as allocated [ 156.365564][ T6] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3710, tgid 3709 (syz-executor.2), ts 138206808170, free_ts 138159024762 [ 156.388639][ T6] get_page_from_freelist+0x1290/0x3b70 [ 156.394174][ T6] __alloc_pages+0x1c7/0x510 [ 156.398745][ T6] alloc_pages+0x1aa/0x310 [ 156.403139][ T6] allocate_slab+0x26c/0x3c0 [ 156.407723][ T6] ___slab_alloc+0x9c4/0xe20 [ 156.412295][ T6] __slab_alloc.constprop.0+0x4d/0xa0 [ 156.417646][ T6] __kmalloc_node_track_caller+0x2cb/0x360 [ 156.423437][ T6] __alloc_skb+0xde/0x340 [ 156.427745][ T6] alloc_skb_with_frags+0x93/0x730 [ 156.432835][ T6] sock_alloc_send_pskb+0x793/0x920 [ 156.438017][ T6] unix_dgram_sendmsg+0x425/0x1ad0 [ 156.443117][ T6] unix_seqpacket_sendmsg+0x111/0x1a0 [ 156.448469][ T6] sock_sendmsg+0xcf/0x120 [ 156.452868][ T6] ____sys_sendmsg+0x334/0x810 [ 156.457610][ T6] ___sys_sendmsg+0xf3/0x170 [ 156.462198][ T6] __sys_sendmmsg+0x195/0x470 [ 156.466867][ T6] page last free stack trace: [ 156.471533][ T6] free_pcp_prepare+0x549/0xd20 [ 156.476363][ T6] free_unref_page+0x19/0x6a0 [ 156.481021][ T6] __unfreeze_partials+0x17c/0x1a0 [ 156.486124][ T6] qlist_free_all+0x6a/0x170 [ 156.490694][ T6] kasan_quarantine_reduce+0x180/0x200 [ 156.496138][ T6] __kasan_slab_alloc+0xa2/0xc0 [ 156.500967][ T6] __kmalloc+0x200/0x350 [ 156.505190][ T6] tomoyo_encode2.part.0+0xe9/0x3a0 [ 156.510369][ T6] tomoyo_encode+0x28/0x50 [ 156.514773][ T6] tomoyo_path_perm+0x368/0x400 [ 156.519605][ T6] tomoyo_path_symlink+0x94/0xe0 [ 156.524526][ T6] security_path_symlink+0xdf/0x150 [ 156.529705][ T6] do_symlinkat+0x106/0x2e0 [ 156.534186][ T6] __x64_sys_symlink+0x75/0x90 [ 156.538945][ T6] do_syscall_64+0x35/0xb0 [ 156.543355][ T6] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.549231][ T6] [ 156.551537][ T6] Memory state around the buggy address: [ 156.557142][ T6] ffff88807b8b7400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.565180][ T6] ffff88807b8b7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.573221][ T6] >ffff88807b8b7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.581256][ T6] ^ [ 156.588686][ T6] ffff88807b8b7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.596726][ T6] ffff88807b8b7600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.604766][ T6] ================================================================== [ 156.613756][ T3681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 156.631233][ T3681] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 156.642502][ T3681] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 00:29:41 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe) [ 156.676573][ T6] Kernel panic - not syncing: panic_on_warn set ... [ 156.683178][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.19.0-rc6-syzkaller-00115-g4a57a8400075 #0 [ 156.693068][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 156.703107][ T6] Workqueue: events key_garbage_collector [ 156.708816][ T6] Call Trace: [ 156.712077][ T6] [ 156.714992][ T6] dump_stack_lvl+0xcd/0x134 [ 156.719595][ T6] panic+0x2d7/0x636 [ 156.723484][ T6] ? panic_print_sys_info.part.0+0x10b/0x10b [ 156.729457][ T6] ? preempt_schedule_common+0x59/0xc0 [ 156.734903][ T6] ? kill_fasync+0x45e/0x470 [ 156.739487][ T6] ? preempt_schedule_thunk+0x16/0x18 [ 156.744871][ T6] ? kill_fasync+0x45e/0x470 [ 156.749444][ T6] end_report.part.0+0x3f/0x7c [ 156.754192][ T6] kasan_report.cold+0x93/0x1c6 [ 156.759028][ T6] ? kill_fasync+0x45e/0x470 [ 156.763603][ T6] kill_fasync+0x45e/0x470 [ 156.768007][ T6] post_one_notification.isra.0+0x6e4/0x990 [ 156.773888][ T6] remove_watch_from_object+0x35a/0x9d0 [ 156.779431][ T6] ? __post_watch_notification+0x840/0x840 [ 156.785223][ T6] ? do_raw_spin_lock+0x120/0x2a0 [ 156.790232][ T6] key_gc_unused_keys.constprop.0+0x2e5/0x600 [ 156.796286][ T6] key_garbage_collector+0x3d7/0x920 [ 156.801565][ T6] process_one_work+0x996/0x1610 [ 156.806489][ T6] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 156.811848][ T6] ? rwlock_bug.part.0+0x90/0x90 [ 156.816769][ T6] ? _raw_spin_lock_irq+0x41/0x50 [ 156.821779][ T6] worker_thread+0x665/0x1080 [ 156.826442][ T6] ? process_one_work+0x1610/0x1610 [ 156.831622][ T6] kthread+0x2e9/0x3a0 [ 156.835700][ T6] ? kthread_complete_and_exit+0x40/0x40 [ 156.841316][ T6] ret_from_fork+0x1f/0x30 [ 156.845731][ T6] [ 156.848928][ T6] Kernel Offset: disabled [ 156.853244][ T6] Rebooting in 86400 seconds..