Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2021/03/14 00:42:08 fuzzer started 2021/03/14 00:42:09 dialing manager at 10.128.0.169:35555 2021/03/14 00:42:09 syscalls: 3557 2021/03/14 00:42:09 code coverage: enabled 2021/03/14 00:42:09 comparison tracing: enabled 2021/03/14 00:42:09 extra coverage: enabled 2021/03/14 00:42:09 setuid sandbox: enabled 2021/03/14 00:42:09 namespace sandbox: enabled 2021/03/14 00:42:09 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/14 00:42:09 fault injection: enabled 2021/03/14 00:42:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/14 00:42:09 net packet injection: enabled 2021/03/14 00:42:09 net device setup: enabled 2021/03/14 00:42:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/14 00:42:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/14 00:42:09 USB emulation: enabled 2021/03/14 00:42:09 hci packet injection: enabled 2021/03/14 00:42:09 wifi device emulation: enabled 2021/03/14 00:42:09 802.15.4 emulation: enabled 2021/03/14 00:42:09 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/14 00:42:09 fetching corpus: 50, signal 46821/50613 (executing program) 2021/03/14 00:42:09 fetching corpus: 100, signal 63375/68956 (executing program) 2021/03/14 00:42:09 fetching corpus: 150, signal 90597/97809 (executing program) 2021/03/14 00:42:09 fetching corpus: 200, signal 103947/112840 (executing program) 2021/03/14 00:42:10 fetching corpus: 250, signal 120977/131370 (executing program) 2021/03/14 00:42:10 fetching corpus: 300, signal 131646/143562 (executing program) 2021/03/14 00:42:10 fetching corpus: 350, signal 142727/156180 (executing program) 2021/03/14 00:42:10 fetching corpus: 400, signal 156200/171072 (executing program) 2021/03/14 00:42:10 fetching corpus: 450, signal 169285/185469 (executing program) 2021/03/14 00:42:10 fetching corpus: 500, signal 179546/197050 (executing program) 2021/03/14 00:42:10 fetching corpus: 550, signal 189020/207860 (executing program) 2021/03/14 00:42:10 fetching corpus: 600, signal 199235/219384 (executing program) 2021/03/14 00:42:11 fetching corpus: 650, signal 206576/228044 (executing program) 2021/03/14 00:42:11 fetching corpus: 700, signal 212056/234889 (executing program) 2021/03/14 00:42:11 fetching corpus: 750, signal 218758/242871 (executing program) 2021/03/14 00:42:11 fetching corpus: 800, signal 225613/250925 (executing program) 2021/03/14 00:42:11 fetching corpus: 850, signal 232394/258946 (executing program) 2021/03/14 00:42:11 fetching corpus: 900, signal 237870/265667 (executing program) 2021/03/14 00:42:11 fetching corpus: 950, signal 244459/273400 (executing program) 2021/03/14 00:42:11 fetching corpus: 1000, signal 249055/279225 (executing program) 2021/03/14 00:42:12 fetching corpus: 1050, signal 254573/285890 (executing program) 2021/03/14 00:42:12 fetching corpus: 1100, signal 259946/292367 (executing program) 2021/03/14 00:42:12 fetching corpus: 1150, signal 267208/300645 (executing program) 2021/03/14 00:42:12 fetching corpus: 1200, signal 271176/305781 (executing program) 2021/03/14 00:42:12 fetching corpus: 1250, signal 280502/315919 (executing program) 2021/03/14 00:42:12 fetching corpus: 1300, signal 290112/326359 (executing program) 2021/03/14 00:42:12 fetching corpus: 1350, signal 294471/331785 (executing program) 2021/03/14 00:42:13 fetching corpus: 1400, signal 298498/336936 (executing program) 2021/03/14 00:42:13 fetching corpus: 1450, signal 300759/340404 (executing program) 2021/03/14 00:42:13 fetching corpus: 1500, signal 304639/345313 (executing program) 2021/03/14 00:42:13 fetching corpus: 1550, signal 308937/350571 (executing program) 2021/03/14 00:42:13 fetching corpus: 1600, signal 312635/355262 (executing program) 2021/03/14 00:42:13 fetching corpus: 1650, signal 315750/359451 (executing program) 2021/03/14 00:42:13 fetching corpus: 1700, signal 318179/362967 (executing program) 2021/03/14 00:42:13 fetching corpus: 1750, signal 321748/367507 (executing program) 2021/03/14 00:42:14 fetching corpus: 1800, signal 326655/373271 (executing program) 2021/03/14 00:42:14 fetching corpus: 1850, signal 329665/377260 (executing program) 2021/03/14 00:42:14 fetching corpus: 1900, signal 333250/381774 (executing program) 2021/03/14 00:42:14 fetching corpus: 1950, signal 337666/387100 (executing program) 2021/03/14 00:42:14 fetching corpus: 2000, signal 341317/391676 (executing program) 2021/03/14 00:42:14 fetching corpus: 2050, signal 344405/395732 (executing program) 2021/03/14 00:42:14 fetching corpus: 2100, signal 347700/399922 (executing program) 2021/03/14 00:42:14 fetching corpus: 2150, signal 350288/403439 (executing program) 2021/03/14 00:42:14 fetching corpus: 2200, signal 352648/406795 (executing program) 2021/03/14 00:42:15 fetching corpus: 2250, signal 356306/411257 (executing program) 2021/03/14 00:42:15 fetching corpus: 2300, signal 360167/415877 (executing program) 2021/03/14 00:42:15 fetching corpus: 2350, signal 363691/420163 (executing program) 2021/03/14 00:42:15 fetching corpus: 2400, signal 366857/424106 (executing program) 2021/03/14 00:42:15 fetching corpus: 2450, signal 370937/428855 (executing program) 2021/03/14 00:42:15 fetching corpus: 2500, signal 375719/434218 (executing program) 2021/03/14 00:42:15 fetching corpus: 2550, signal 378787/438090 (executing program) 2021/03/14 00:42:16 fetching corpus: 2600, signal 381264/441445 (executing program) 2021/03/14 00:42:16 fetching corpus: 2650, signal 386666/447317 (executing program) 2021/03/14 00:42:16 fetching corpus: 2700, signal 388460/450055 (executing program) 2021/03/14 00:42:16 fetching corpus: 2750, signal 390411/452824 (executing program) 2021/03/14 00:42:16 fetching corpus: 2800, signal 392239/455525 (executing program) 2021/03/14 00:42:16 fetching corpus: 2850, signal 394938/458919 (executing program) 2021/03/14 00:42:16 fetching corpus: 2900, signal 396932/461693 (executing program) 2021/03/14 00:42:16 fetching corpus: 2950, signal 399293/464838 (executing program) 2021/03/14 00:42:16 fetching corpus: 3000, signal 402209/468393 (executing program) 2021/03/14 00:42:17 fetching corpus: 3050, signal 403462/470526 (executing program) 2021/03/14 00:42:17 fetching corpus: 3100, signal 405049/472981 (executing program) 2021/03/14 00:42:17 fetching corpus: 3150, signal 406435/475239 (executing program) 2021/03/14 00:42:17 fetching corpus: 3200, signal 408741/478265 (executing program) 2021/03/14 00:42:17 fetching corpus: 3250, signal 410388/480728 (executing program) 2021/03/14 00:42:17 fetching corpus: 3300, signal 412185/483287 (executing program) 2021/03/14 00:42:17 fetching corpus: 3350, signal 415281/486987 (executing program) 2021/03/14 00:42:17 fetching corpus: 3400, signal 417059/489523 (executing program) 2021/03/14 00:42:18 fetching corpus: 3450, signal 419202/492365 (executing program) 2021/03/14 00:42:18 fetching corpus: 3500, signal 422430/496053 (executing program) 2021/03/14 00:42:18 fetching corpus: 3550, signal 424268/498607 (executing program) 2021/03/14 00:42:18 fetching corpus: 3600, signal 426626/501605 (executing program) 2021/03/14 00:42:18 fetching corpus: 3650, signal 429466/505052 (executing program) 2021/03/14 00:42:18 fetching corpus: 3700, signal 431334/507601 (executing program) 2021/03/14 00:42:18 fetching corpus: 3750, signal 434383/511120 (executing program) 2021/03/14 00:42:18 fetching corpus: 3800, signal 436787/514112 (executing program) 2021/03/14 00:42:18 fetching corpus: 3850, signal 439228/517086 (executing program) 2021/03/14 00:42:19 fetching corpus: 3900, signal 442162/520498 (executing program) 2021/03/14 00:42:19 fetching corpus: 3950, signal 444734/523561 (executing program) 2021/03/14 00:42:19 fetching corpus: 4000, signal 447821/527046 (executing program) 2021/03/14 00:42:19 fetching corpus: 4050, signal 450515/530194 (executing program) 2021/03/14 00:42:19 fetching corpus: 4100, signal 452391/532636 (executing program) 2021/03/14 00:42:19 fetching corpus: 4150, signal 454329/535180 (executing program) 2021/03/14 00:42:19 fetching corpus: 4200, signal 455752/537306 (executing program) 2021/03/14 00:42:20 fetching corpus: 4250, signal 457334/539513 (executing program) 2021/03/14 00:42:20 fetching corpus: 4300, signal 459084/541869 (executing program) 2021/03/14 00:42:20 fetching corpus: 4350, signal 460484/543890 (executing program) 2021/03/14 00:42:20 fetching corpus: 4400, signal 462429/546414 (executing program) 2021/03/14 00:42:20 fetching corpus: 4450, signal 464533/549000 (executing program) 2021/03/14 00:42:20 fetching corpus: 4500, signal 466659/551583 (executing program) 2021/03/14 00:42:20 fetching corpus: 4550, signal 470085/555231 (executing program) 2021/03/14 00:42:21 fetching corpus: 4600, signal 473364/558769 (executing program) 2021/03/14 00:42:21 fetching corpus: 4650, signal 474531/560644 (executing program) 2021/03/14 00:42:21 fetching corpus: 4700, signal 476079/562788 (executing program) 2021/03/14 00:42:21 fetching corpus: 4750, signal 477737/565005 (executing program) 2021/03/14 00:42:21 fetching corpus: 4800, signal 479110/566992 (executing program) 2021/03/14 00:42:21 fetching corpus: 4850, signal 480618/569055 (executing program) 2021/03/14 00:42:21 fetching corpus: 4900, signal 482211/571210 (executing program) 2021/03/14 00:42:21 fetching corpus: 4950, signal 484060/573589 (executing program) 2021/03/14 00:42:21 fetching corpus: 5000, signal 485307/575455 (executing program) 2021/03/14 00:42:22 fetching corpus: 5050, signal 487238/577786 (executing program) 2021/03/14 00:42:22 fetching corpus: 5100, signal 489087/580094 (executing program) 2021/03/14 00:42:22 fetching corpus: 5150, signal 490075/581730 (executing program) 2021/03/14 00:42:22 fetching corpus: 5200, signal 491834/583907 (executing program) 2021/03/14 00:42:22 fetching corpus: 5250, signal 493358/585910 (executing program) 2021/03/14 00:42:22 fetching corpus: 5300, signal 496415/589107 (executing program) 2021/03/14 00:42:22 fetching corpus: 5350, signal 498475/591527 (executing program) 2021/03/14 00:42:22 fetching corpus: 5400, signal 499886/593431 (executing program) 2021/03/14 00:42:23 fetching corpus: 5450, signal 501449/595499 (executing program) 2021/03/14 00:42:23 fetching corpus: 5500, signal 503658/597983 (executing program) 2021/03/14 00:42:23 fetching corpus: 5550, signal 504707/599649 (executing program) 2021/03/14 00:42:23 fetching corpus: 5600, signal 505809/601329 (executing program) 2021/03/14 00:42:23 fetching corpus: 5650, signal 507206/603203 (executing program) 2021/03/14 00:42:23 fetching corpus: 5700, signal 508688/605140 (executing program) 2021/03/14 00:42:23 fetching corpus: 5750, signal 511281/607889 (executing program) 2021/03/14 00:42:23 fetching corpus: 5800, signal 513685/610521 (executing program) 2021/03/14 00:42:24 fetching corpus: 5850, signal 515242/612462 (executing program) 2021/03/14 00:42:24 fetching corpus: 5900, signal 516688/614329 (executing program) 2021/03/14 00:42:24 fetching corpus: 5950, signal 518165/616201 (executing program) 2021/03/14 00:42:24 fetching corpus: 6000, signal 519749/618191 (executing program) 2021/03/14 00:42:24 fetching corpus: 6050, signal 521096/619967 (executing program) 2021/03/14 00:42:25 fetching corpus: 6100, signal 522591/621804 (executing program) 2021/03/14 00:42:25 fetching corpus: 6150, signal 524973/624332 (executing program) 2021/03/14 00:42:25 fetching corpus: 6200, signal 525868/625812 (executing program) 2021/03/14 00:42:25 fetching corpus: 6250, signal 528087/628208 (executing program) 2021/03/14 00:42:25 fetching corpus: 6300, signal 529862/630290 (executing program) 2021/03/14 00:42:25 fetching corpus: 6350, signal 530590/631614 (executing program) 2021/03/14 00:42:25 fetching corpus: 6400, signal 532290/633607 (executing program) 2021/03/14 00:42:26 fetching corpus: 6450, signal 533875/635475 (executing program) 2021/03/14 00:42:26 fetching corpus: 6500, signal 535569/637463 (executing program) 2021/03/14 00:42:26 fetching corpus: 6550, signal 536722/639063 (executing program) 2021/03/14 00:42:26 fetching corpus: 6600, signal 538243/640864 (executing program) 2021/03/14 00:42:26 fetching corpus: 6650, signal 540495/643160 (executing program) 2021/03/14 00:42:26 fetching corpus: 6700, signal 542048/644995 (executing program) 2021/03/14 00:42:26 fetching corpus: 6750, signal 543954/647076 (executing program) 2021/03/14 00:42:26 fetching corpus: 6800, signal 545059/648598 (executing program) 2021/03/14 00:42:27 fetching corpus: 6850, signal 546559/650363 (executing program) 2021/03/14 00:42:27 fetching corpus: 6900, signal 547496/651763 (executing program) 2021/03/14 00:42:27 fetching corpus: 6950, signal 548783/653368 (executing program) 2021/03/14 00:42:27 fetching corpus: 7000, signal 550044/654999 (executing program) 2021/03/14 00:42:27 fetching corpus: 7050, signal 551167/656510 (executing program) 2021/03/14 00:42:27 fetching corpus: 7100, signal 552218/657990 (executing program) 2021/03/14 00:42:27 fetching corpus: 7150, signal 553948/659876 (executing program) 2021/03/14 00:42:27 fetching corpus: 7200, signal 555603/661709 (executing program) 2021/03/14 00:42:28 fetching corpus: 7250, signal 556372/662943 (executing program) 2021/03/14 00:42:28 fetching corpus: 7300, signal 557456/664392 (executing program) 2021/03/14 00:42:28 fetching corpus: 7350, signal 558758/665989 (executing program) 2021/03/14 00:42:28 fetching corpus: 7400, signal 560066/667633 (executing program) 2021/03/14 00:42:28 fetching corpus: 7450, signal 561059/669005 (executing program) 2021/03/14 00:42:28 fetching corpus: 7500, signal 562300/670539 (executing program) 2021/03/14 00:42:28 fetching corpus: 7550, signal 563501/672082 (executing program) 2021/03/14 00:42:28 fetching corpus: 7600, signal 564648/673538 (executing program) 2021/03/14 00:42:28 fetching corpus: 7650, signal 565711/674884 (executing program) 2021/03/14 00:42:28 fetching corpus: 7700, signal 566516/676128 (executing program) 2021/03/14 00:42:29 fetching corpus: 7750, signal 567523/677461 (executing program) 2021/03/14 00:42:29 fetching corpus: 7800, signal 568225/678596 (executing program) 2021/03/14 00:42:29 fetching corpus: 7850, signal 568690/679581 (executing program) 2021/03/14 00:42:29 fetching corpus: 7900, signal 569665/680899 (executing program) 2021/03/14 00:42:29 fetching corpus: 7950, signal 570547/682208 (executing program) 2021/03/14 00:42:29 fetching corpus: 8000, signal 571408/683444 (executing program) 2021/03/14 00:42:29 fetching corpus: 8050, signal 572740/684967 (executing program) 2021/03/14 00:42:29 fetching corpus: 8100, signal 573800/686301 (executing program) 2021/03/14 00:42:29 fetching corpus: 8150, signal 574784/687586 (executing program) 2021/03/14 00:42:30 fetching corpus: 8200, signal 576492/689377 (executing program) 2021/03/14 00:42:30 fetching corpus: 8250, signal 577732/690883 (executing program) 2021/03/14 00:42:30 fetching corpus: 8300, signal 578970/692321 (executing program) 2021/03/14 00:42:30 fetching corpus: 8350, signal 579919/693625 (executing program) 2021/03/14 00:42:30 fetching corpus: 8400, signal 581529/695266 (executing program) 2021/03/14 00:42:30 fetching corpus: 8450, signal 582749/696688 (executing program) 2021/03/14 00:42:30 fetching corpus: 8500, signal 583524/697800 (executing program) 2021/03/14 00:42:30 fetching corpus: 8550, signal 584648/699152 (executing program) 2021/03/14 00:42:30 fetching corpus: 8600, signal 585912/700558 (executing program) 2021/03/14 00:42:31 fetching corpus: 8650, signal 586878/701815 (executing program) 2021/03/14 00:42:31 fetching corpus: 8700, signal 589033/703730 (executing program) 2021/03/14 00:42:31 fetching corpus: 8750, signal 590476/705246 (executing program) 2021/03/14 00:42:31 fetching corpus: 8800, signal 591569/706494 (executing program) 2021/03/14 00:42:31 fetching corpus: 8850, signal 592864/707874 (executing program) 2021/03/14 00:42:31 fetching corpus: 8900, signal 593739/709016 (executing program) 2021/03/14 00:42:32 fetching corpus: 8950, signal 595445/710681 (executing program) 2021/03/14 00:42:32 fetching corpus: 9000, signal 596799/712114 (executing program) 2021/03/14 00:42:32 fetching corpus: 9050, signal 597922/713405 (executing program) 2021/03/14 00:42:32 fetching corpus: 9100, signal 599765/715095 (executing program) 2021/03/14 00:42:32 fetching corpus: 9150, signal 601039/716495 (executing program) 2021/03/14 00:42:32 fetching corpus: 9200, signal 602227/717863 (executing program) 2021/03/14 00:42:32 fetching corpus: 9250, signal 603097/719002 (executing program) 2021/03/14 00:42:33 fetching corpus: 9300, signal 604477/720429 (executing program) 2021/03/14 00:42:33 fetching corpus: 9350, signal 606003/721907 (executing program) 2021/03/14 00:42:33 fetching corpus: 9400, signal 606591/722900 (executing program) 2021/03/14 00:42:33 fetching corpus: 9450, signal 607844/724214 (executing program) 2021/03/14 00:42:33 fetching corpus: 9500, signal 608915/725456 (executing program) 2021/03/14 00:42:33 fetching corpus: 9550, signal 609924/726585 (executing program) 2021/03/14 00:42:33 fetching corpus: 9600, signal 611456/728051 (executing program) 2021/03/14 00:42:33 fetching corpus: 9650, signal 612468/729244 (executing program) 2021/03/14 00:42:33 fetching corpus: 9700, signal 613308/730323 (executing program) 2021/03/14 00:42:34 fetching corpus: 9750, signal 614363/731494 (executing program) 2021/03/14 00:42:34 fetching corpus: 9800, signal 614949/732393 (executing program) 2021/03/14 00:42:34 fetching corpus: 9850, signal 616312/733722 (executing program) 2021/03/14 00:42:34 fetching corpus: 9900, signal 617439/734897 (executing program) 2021/03/14 00:42:34 fetching corpus: 9950, signal 618187/735919 (executing program) 2021/03/14 00:42:34 fetching corpus: 10000, signal 619747/737344 (executing program) 2021/03/14 00:42:34 fetching corpus: 10050, signal 621407/738766 (executing program) 2021/03/14 00:42:35 fetching corpus: 10100, signal 622088/739694 (executing program) 2021/03/14 00:42:35 fetching corpus: 10150, signal 622789/740654 (executing program) 2021/03/14 00:42:35 fetching corpus: 10200, signal 623746/741705 (executing program) 2021/03/14 00:42:35 fetching corpus: 10250, signal 625131/743038 (executing program) 2021/03/14 00:42:35 fetching corpus: 10300, signal 626177/744133 (executing program) 2021/03/14 00:42:35 fetching corpus: 10350, signal 627413/745365 (executing program) 2021/03/14 00:42:35 fetching corpus: 10400, signal 628274/746390 (executing program) 2021/03/14 00:42:35 fetching corpus: 10450, signal 629688/747665 (executing program) 2021/03/14 00:42:35 fetching corpus: 10500, signal 630400/748596 (executing program) 2021/03/14 00:42:36 fetching corpus: 10550, signal 631029/749480 (executing program) 2021/03/14 00:42:36 fetching corpus: 10600, signal 632111/750602 (executing program) 2021/03/14 00:42:36 fetching corpus: 10650, signal 632808/751478 (executing program) 2021/03/14 00:42:36 fetching corpus: 10700, signal 633690/752487 (executing program) 2021/03/14 00:42:36 fetching corpus: 10750, signal 634430/753432 (executing program) 2021/03/14 00:42:36 fetching corpus: 10800, signal 635374/754451 (executing program) 2021/03/14 00:42:36 fetching corpus: 10850, signal 639373/756958 (executing program) 2021/03/14 00:42:37 fetching corpus: 10900, signal 640334/758014 (executing program) 2021/03/14 00:42:37 fetching corpus: 10950, signal 641144/758946 (executing program) 2021/03/14 00:42:37 fetching corpus: 11000, signal 641770/759818 (executing program) 2021/03/14 00:42:37 fetching corpus: 11050, signal 642354/760616 (executing program) 2021/03/14 00:42:37 fetching corpus: 11100, signal 643666/761840 (executing program) 2021/03/14 00:42:37 fetching corpus: 11150, signal 644569/762796 (executing program) 2021/03/14 00:42:37 fetching corpus: 11200, signal 645429/763713 (executing program) 2021/03/14 00:42:37 fetching corpus: 11250, signal 646542/764780 (executing program) 2021/03/14 00:42:37 fetching corpus: 11300, signal 647465/765762 (executing program) 2021/03/14 00:42:38 fetching corpus: 11350, signal 648560/766813 (executing program) 2021/03/14 00:42:38 fetching corpus: 11400, signal 649798/767945 (executing program) 2021/03/14 00:42:38 fetching corpus: 11450, signal 650827/768957 (executing program) 2021/03/14 00:42:38 fetching corpus: 11500, signal 651256/769686 (executing program) 2021/03/14 00:42:38 fetching corpus: 11550, signal 652360/770789 (executing program) 2021/03/14 00:42:38 fetching corpus: 11600, signal 653137/771642 (executing program) 2021/03/14 00:42:38 fetching corpus: 11650, signal 654239/772617 (executing program) 2021/03/14 00:42:38 fetching corpus: 11700, signal 654920/773432 (executing program) 2021/03/14 00:42:39 fetching corpus: 11750, signal 656010/774411 (executing program) 2021/03/14 00:42:39 fetching corpus: 11800, signal 656666/775215 (executing program) 2021/03/14 00:42:39 fetching corpus: 11850, signal 657688/776178 (executing program) 2021/03/14 00:42:39 fetching corpus: 11900, signal 658399/777011 (executing program) 2021/03/14 00:42:39 fetching corpus: 11950, signal 659824/778142 (executing program) 2021/03/14 00:42:39 fetching corpus: 12000, signal 660768/779019 (executing program) 2021/03/14 00:42:39 fetching corpus: 12050, signal 661489/779830 (executing program) 2021/03/14 00:42:40 fetching corpus: 12100, signal 662341/780671 (executing program) 2021/03/14 00:42:40 fetching corpus: 12150, signal 663004/781463 (executing program) 2021/03/14 00:42:40 fetching corpus: 12200, signal 663730/782292 (executing program) 2021/03/14 00:42:40 fetching corpus: 12250, signal 664210/782984 (executing program) 2021/03/14 00:42:40 fetching corpus: 12300, signal 665106/783855 (executing program) 2021/03/14 00:42:40 fetching corpus: 12350, signal 665857/784688 (executing program) 2021/03/14 00:42:40 fetching corpus: 12400, signal 666694/785536 (executing program) 2021/03/14 00:42:40 fetching corpus: 12450, signal 667633/786421 (executing program) 2021/03/14 00:42:40 fetching corpus: 12500, signal 668845/787410 (executing program) 2021/03/14 00:42:40 fetching corpus: 12550, signal 669861/788341 (executing program) 2021/03/14 00:42:41 fetching corpus: 12600, signal 671033/789326 (executing program) 2021/03/14 00:42:41 fetching corpus: 12650, signal 671864/790161 (executing program) 2021/03/14 00:42:41 fetching corpus: 12700, signal 673491/791277 (executing program) 2021/03/14 00:42:41 fetching corpus: 12750, signal 675172/792496 (executing program) 2021/03/14 00:42:41 fetching corpus: 12800, signal 675967/793286 (executing program) 2021/03/14 00:42:41 fetching corpus: 12850, signal 676596/793994 (executing program) 2021/03/14 00:42:41 fetching corpus: 12900, signal 677202/794668 (executing program) 2021/03/14 00:42:41 fetching corpus: 12950, signal 677915/795445 (executing program) 2021/03/14 00:42:42 fetching corpus: 13000, signal 678645/796181 (executing program) 2021/03/14 00:42:42 fetching corpus: 13050, signal 679629/797067 (executing program) 2021/03/14 00:42:42 fetching corpus: 13100, signal 680631/797974 (executing program) 2021/03/14 00:42:42 fetching corpus: 13150, signal 681388/798689 (executing program) 2021/03/14 00:42:42 fetching corpus: 13200, signal 682203/799476 (executing program) 2021/03/14 00:42:42 fetching corpus: 13250, signal 682918/800236 (executing program) 2021/03/14 00:42:42 fetching corpus: 13300, signal 683689/800996 (executing program) 2021/03/14 00:42:42 fetching corpus: 13350, signal 684999/801962 (executing program) 2021/03/14 00:42:42 fetching corpus: 13400, signal 686003/802784 (executing program) 2021/03/14 00:42:42 fetching corpus: 13450, signal 686661/803477 (executing program) 2021/03/14 00:42:43 fetching corpus: 13500, signal 687300/804135 (executing program) 2021/03/14 00:42:43 fetching corpus: 13550, signal 687928/804822 (executing program) 2021/03/14 00:42:43 fetching corpus: 13600, signal 688845/805587 (executing program) 2021/03/14 00:42:43 fetching corpus: 13650, signal 689412/806182 (executing program) 2021/03/14 00:42:43 fetching corpus: 13700, signal 689905/806785 (executing program) 2021/03/14 00:42:43 fetching corpus: 13750, signal 690480/807412 (executing program) 2021/03/14 00:42:43 fetching corpus: 13800, signal 691054/808047 (executing program) 2021/03/14 00:42:44 fetching corpus: 13850, signal 691743/808739 (executing program) 2021/03/14 00:42:44 fetching corpus: 13900, signal 692199/809362 (executing program) 2021/03/14 00:42:44 fetching corpus: 13950, signal 693303/810188 (executing program) 2021/03/14 00:42:44 fetching corpus: 14000, signal 693854/810754 (executing program) 2021/03/14 00:42:44 fetching corpus: 14050, signal 694599/811441 (executing program) 2021/03/14 00:42:44 fetching corpus: 14100, signal 695191/812092 (executing program) 2021/03/14 00:42:44 fetching corpus: 14150, signal 695641/812649 (executing program) 2021/03/14 00:42:45 fetching corpus: 14200, signal 696476/813325 (executing program) 2021/03/14 00:42:45 fetching corpus: 14250, signal 697501/814089 (executing program) 2021/03/14 00:42:45 fetching corpus: 14300, signal 698068/814671 (executing program) 2021/03/14 00:42:45 fetching corpus: 14350, signal 698866/815340 (executing program) 2021/03/14 00:42:45 fetching corpus: 14400, signal 699847/816024 (executing program) 2021/03/14 00:42:45 fetching corpus: 14450, signal 701144/816855 (executing program) 2021/03/14 00:42:45 fetching corpus: 14500, signal 702023/817528 (executing program) 2021/03/14 00:42:45 fetching corpus: 14550, signal 702750/818174 (executing program) 2021/03/14 00:42:46 fetching corpus: 14600, signal 704310/819092 (executing program) 2021/03/14 00:42:46 fetching corpus: 14650, signal 705010/819707 (executing program) 2021/03/14 00:42:46 fetching corpus: 14700, signal 705609/820306 (executing program) 2021/03/14 00:42:46 fetching corpus: 14750, signal 706165/820876 (executing program) 2021/03/14 00:42:46 fetching corpus: 14800, signal 706867/821468 (executing program) 2021/03/14 00:42:46 fetching corpus: 14850, signal 708759/822446 (executing program) 2021/03/14 00:42:47 fetching corpus: 14900, signal 709619/823087 (executing program) 2021/03/14 00:42:47 fetching corpus: 14950, signal 710326/823684 (executing program) 2021/03/14 00:42:47 fetching corpus: 15000, signal 711573/824463 (executing program) 2021/03/14 00:42:47 fetching corpus: 15050, signal 712263/825065 (executing program) 2021/03/14 00:42:47 fetching corpus: 15100, signal 713234/825753 (executing program) 2021/03/14 00:42:47 fetching corpus: 15150, signal 713944/826357 (executing program) 2021/03/14 00:42:47 fetching corpus: 15200, signal 714886/826994 (executing program) 2021/03/14 00:42:48 fetching corpus: 15250, signal 715497/827494 (executing program) 2021/03/14 00:42:48 fetching corpus: 15300, signal 716463/828104 (executing program) 2021/03/14 00:42:48 fetching corpus: 15350, signal 716928/828614 (executing program) 2021/03/14 00:42:48 fetching corpus: 15400, signal 717961/829229 (executing program) 2021/03/14 00:42:48 fetching corpus: 15450, signal 718456/829731 (executing program) 2021/03/14 00:42:48 fetching corpus: 15500, signal 719257/830325 (executing program) 2021/03/14 00:42:48 fetching corpus: 15550, signal 719710/830829 (executing program) 2021/03/14 00:42:48 fetching corpus: 15600, signal 720688/831457 (executing program) 2021/03/14 00:42:49 fetching corpus: 15650, signal 721845/832148 (executing program) 2021/03/14 00:42:49 fetching corpus: 15700, signal 722435/832652 (executing program) 2021/03/14 00:42:49 fetching corpus: 15750, signal 723182/833210 (executing program) 2021/03/14 00:42:49 fetching corpus: 15800, signal 723762/833733 (executing program) 2021/03/14 00:42:49 fetching corpus: 15850, signal 724730/834345 (executing program) 2021/03/14 00:42:49 fetching corpus: 15900, signal 725625/834941 (executing program) 2021/03/14 00:42:49 fetching corpus: 15950, signal 726722/835609 (executing program) 2021/03/14 00:42:49 fetching corpus: 16000, signal 727160/836045 (executing program) 2021/03/14 00:42:50 fetching corpus: 16050, signal 727983/836622 (executing program) 2021/03/14 00:42:50 fetching corpus: 16100, signal 728551/837093 (executing program) 2021/03/14 00:42:50 fetching corpus: 16150, signal 729015/837529 (executing program) 2021/03/14 00:42:50 fetching corpus: 16200, signal 729514/837999 (executing program) 2021/03/14 00:42:50 fetching corpus: 16250, signal 730751/838627 (executing program) 2021/03/14 00:42:50 fetching corpus: 16300, signal 731451/839134 (executing program) 2021/03/14 00:42:51 fetching corpus: 16350, signal 732054/839614 (executing program) 2021/03/14 00:42:51 fetching corpus: 16400, signal 732996/840136 (executing program) 2021/03/14 00:42:51 fetching corpus: 16450, signal 733927/840687 (executing program) 2021/03/14 00:42:51 fetching corpus: 16500, signal 735275/841374 (executing program) 2021/03/14 00:42:51 fetching corpus: 16550, signal 736332/841923 (executing program) 2021/03/14 00:42:51 fetching corpus: 16600, signal 737235/842469 (executing program) 2021/03/14 00:42:51 fetching corpus: 16650, signal 738303/843008 (executing program) 2021/03/14 00:42:51 fetching corpus: 16700, signal 738914/843443 (executing program) 2021/03/14 00:42:51 fetching corpus: 16750, signal 739625/843937 (executing program) 2021/03/14 00:42:52 fetching corpus: 16800, signal 740186/844398 (executing program) 2021/03/14 00:42:52 fetching corpus: 16850, signal 741150/844905 (executing program) 2021/03/14 00:42:52 fetching corpus: 16900, signal 741637/845327 (executing program) 2021/03/14 00:42:52 fetching corpus: 16950, signal 742300/845767 (executing program) 2021/03/14 00:42:52 fetching corpus: 17000, signal 743137/846232 (executing program) 2021/03/14 00:42:52 fetching corpus: 17050, signal 743478/846584 (executing program) 2021/03/14 00:42:52 fetching corpus: 17100, signal 744210/847016 (executing program) 2021/03/14 00:42:53 fetching corpus: 17150, signal 744845/847463 (executing program) 2021/03/14 00:42:53 fetching corpus: 17200, signal 745539/847880 (executing program) 2021/03/14 00:42:53 fetching corpus: 17250, signal 746096/848312 (executing program) 2021/03/14 00:42:53 fetching corpus: 17300, signal 746926/848789 (executing program) 2021/03/14 00:42:53 fetching corpus: 17350, signal 747440/849171 (executing program) 2021/03/14 00:42:53 fetching corpus: 17400, signal 747907/849575 (executing program) 2021/03/14 00:42:53 fetching corpus: 17450, signal 748374/849981 (executing program) 2021/03/14 00:42:54 fetching corpus: 17500, signal 749294/850451 (executing program) 2021/03/14 00:42:54 fetching corpus: 17550, signal 749842/850845 (executing program) 2021/03/14 00:42:54 fetching corpus: 17600, signal 750214/851223 (executing program) 2021/03/14 00:42:54 fetching corpus: 17650, signal 750736/851619 (executing program) 2021/03/14 00:42:54 fetching corpus: 17700, signal 752855/852313 (executing program) 2021/03/14 00:42:54 fetching corpus: 17750, signal 753350/852692 (executing program) 2021/03/14 00:42:54 fetching corpus: 17800, signal 753854/853074 (executing program) 2021/03/14 00:42:55 fetching corpus: 17850, signal 754317/853407 (executing program) 2021/03/14 00:42:55 fetching corpus: 17900, signal 754729/853761 (executing program) 2021/03/14 00:42:55 fetching corpus: 17950, signal 755318/854129 (executing program) 2021/03/14 00:42:55 fetching corpus: 18000, signal 755609/854466 (executing program) 2021/03/14 00:42:55 fetching corpus: 18050, signal 757255/855019 (executing program) 2021/03/14 00:42:55 fetching corpus: 18100, signal 757992/855417 (executing program) 2021/03/14 00:42:55 fetching corpus: 18150, signal 758792/855808 (executing program) 2021/03/14 00:42:56 fetching corpus: 18200, signal 759693/856226 (executing program) 2021/03/14 00:42:56 fetching corpus: 18250, signal 760321/856551 (executing program) 2021/03/14 00:42:56 fetching corpus: 18300, signal 761232/856936 (executing program) 2021/03/14 00:42:56 fetching corpus: 18350, signal 761766/857292 (executing program) 2021/03/14 00:42:56 fetching corpus: 18400, signal 762193/857622 (executing program) 2021/03/14 00:42:56 fetching corpus: 18450, signal 763106/858036 (executing program) 2021/03/14 00:42:56 fetching corpus: 18500, signal 764121/858458 (executing program) 2021/03/14 00:42:57 fetching corpus: 18550, signal 764516/858772 (executing program) 2021/03/14 00:42:57 fetching corpus: 18600, signal 764982/859091 (executing program) 2021/03/14 00:42:57 fetching corpus: 18650, signal 765393/859393 (executing program) 2021/03/14 00:42:57 fetching corpus: 18700, signal 765833/859664 (executing program) 2021/03/14 00:42:57 fetching corpus: 18750, signal 766485/860047 (executing program) 2021/03/14 00:42:57 fetching corpus: 18800, signal 767210/860390 (executing program) 2021/03/14 00:42:57 fetching corpus: 18850, signal 768028/860762 (executing program) 2021/03/14 00:42:57 fetching corpus: 18900, signal 768646/861099 (executing program) 2021/03/14 00:42:57 fetching corpus: 18950, signal 769393/861450 (executing program) 2021/03/14 00:42:57 fetching corpus: 19000, signal 769746/861760 (executing program) 2021/03/14 00:42:58 fetching corpus: 19050, signal 770393/862063 (executing program) 2021/03/14 00:42:58 fetching corpus: 19100, signal 770844/862338 (executing program) 2021/03/14 00:42:58 fetching corpus: 19150, signal 771637/862674 (executing program) 2021/03/14 00:42:58 fetching corpus: 19200, signal 772537/863045 (executing program) 2021/03/14 00:42:58 fetching corpus: 19250, signal 774101/863448 (executing program) 2021/03/14 00:42:58 fetching corpus: 19300, signal 775070/863772 (executing program) 2021/03/14 00:42:58 fetching corpus: 19350, signal 775608/864068 (executing program) 2021/03/14 00:42:59 fetching corpus: 19400, signal 776096/864354 (executing program) 2021/03/14 00:42:59 fetching corpus: 19450, signal 776418/864654 (executing program) 2021/03/14 00:42:59 fetching corpus: 19500, signal 776965/864916 (executing program) 2021/03/14 00:42:59 fetching corpus: 19550, signal 777483/865166 (executing program) 2021/03/14 00:42:59 fetching corpus: 19600, signal 778123/865471 (executing program) 2021/03/14 00:42:59 fetching corpus: 19650, signal 778697/865755 (executing program) 2021/03/14 00:42:59 fetching corpus: 19700, signal 779334/866040 (executing program) 2021/03/14 00:42:59 fetching corpus: 19750, signal 779970/866320 (executing program) 2021/03/14 00:43:00 fetching corpus: 19800, signal 780567/866618 (executing program) 2021/03/14 00:43:00 fetching corpus: 19850, signal 781373/866894 (executing program) 2021/03/14 00:43:00 fetching corpus: 19900, signal 781892/867164 (executing program) 2021/03/14 00:43:00 fetching corpus: 19950, signal 782407/867419 (executing program) 2021/03/14 00:43:00 fetching corpus: 20000, signal 782864/867673 (executing program) 2021/03/14 00:43:00 fetching corpus: 20050, signal 783416/867921 (executing program) 2021/03/14 00:43:00 fetching corpus: 20100, signal 784064/868153 (executing program) 2021/03/14 00:43:01 fetching corpus: 20150, signal 784626/868433 (executing program) 2021/03/14 00:43:01 fetching corpus: 20200, signal 785439/868697 (executing program) 2021/03/14 00:43:01 fetching corpus: 20250, signal 785896/868944 (executing program) 2021/03/14 00:43:01 fetching corpus: 20300, signal 786421/869168 (executing program) 2021/03/14 00:43:01 fetching corpus: 20350, signal 786901/869405 (executing program) 2021/03/14 00:43:01 fetching corpus: 20400, signal 787518/869633 (executing program) 2021/03/14 00:43:02 fetching corpus: 20450, signal 787903/869866 (executing program) 2021/03/14 00:43:02 fetching corpus: 20500, signal 788499/870122 (executing program) 2021/03/14 00:43:02 fetching corpus: 20550, signal 789410/870388 (executing program) 2021/03/14 00:43:02 fetching corpus: 20600, signal 789704/870631 (executing program) 2021/03/14 00:43:02 fetching corpus: 20650, signal 790049/870840 (executing program) 2021/03/14 00:43:02 fetching corpus: 20700, signal 791109/871131 (executing program) 2021/03/14 00:43:02 fetching corpus: 20750, signal 791605/871349 (executing program) 2021/03/14 00:43:02 fetching corpus: 20800, signal 792093/871567 (executing program) 2021/03/14 00:43:02 fetching corpus: 20850, signal 792690/871779 (executing program) 2021/03/14 00:43:03 fetching corpus: 20900, signal 793028/871978 (executing program) syzkaller login: [ 132.937001][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943749][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/14 00:43:03 fetching corpus: 20950, signal 793512/872175 (executing program) 2021/03/14 00:43:03 fetching corpus: 21000, signal 793910/872394 (executing program) 2021/03/14 00:43:03 fetching corpus: 21050, signal 794655/872592 (executing program) 2021/03/14 00:43:03 fetching corpus: 21100, signal 795192/872780 (executing program) 2021/03/14 00:43:03 fetching corpus: 21150, signal 795511/873001 (executing program) 2021/03/14 00:43:03 fetching corpus: 21200, signal 795865/873174 (executing program) 2021/03/14 00:43:03 fetching corpus: 21250, signal 796222/873371 (executing program) 2021/03/14 00:43:03 fetching corpus: 21300, signal 797075/873567 (executing program) 2021/03/14 00:43:03 fetching corpus: 21350, signal 797566/873760 (executing program) 2021/03/14 00:43:04 fetching corpus: 21400, signal 798081/873930 (executing program) 2021/03/14 00:43:04 fetching corpus: 21450, signal 798337/874100 (executing program) 2021/03/14 00:43:04 fetching corpus: 21500, signal 798901/874309 (executing program) 2021/03/14 00:43:04 fetching corpus: 21550, signal 799313/874459 (executing program) 2021/03/14 00:43:04 fetching corpus: 21600, signal 799761/874662 (executing program) 2021/03/14 00:43:04 fetching corpus: 21650, signal 800256/874819 (executing program) 2021/03/14 00:43:04 fetching corpus: 21700, signal 800669/874846 (executing program) 2021/03/14 00:43:04 fetching corpus: 21750, signal 801198/874846 (executing program) 2021/03/14 00:43:04 fetching corpus: 21800, signal 801617/874857 (executing program) 2021/03/14 00:43:05 fetching corpus: 21850, signal 802256/874858 (executing program) 2021/03/14 00:43:05 fetching corpus: 21900, signal 802904/874858 (executing program) 2021/03/14 00:43:05 fetching corpus: 21950, signal 803338/874858 (executing program) 2021/03/14 00:43:05 fetching corpus: 22000, signal 803779/874858 (executing program) 2021/03/14 00:43:05 fetching corpus: 22050, signal 804484/874858 (executing program) 2021/03/14 00:43:05 fetching corpus: 22100, signal 804897/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22150, signal 805276/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22200, signal 805898/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22250, signal 806722/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22300, signal 806964/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22350, signal 807543/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22400, signal 808209/874858 (executing program) 2021/03/14 00:43:06 fetching corpus: 22450, signal 809021/874860 (executing program) 2021/03/14 00:43:06 fetching corpus: 22500, signal 809416/874863 (executing program) 2021/03/14 00:43:06 fetching corpus: 22550, signal 809858/874863 (executing program) 2021/03/14 00:43:07 fetching corpus: 22600, signal 810263/874864 (executing program) 2021/03/14 00:43:07 fetching corpus: 22650, signal 810868/874868 (executing program) 2021/03/14 00:43:07 fetching corpus: 22700, signal 811298/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 22750, signal 812044/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 22800, signal 812381/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 22850, signal 812736/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 22900, signal 813151/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 22950, signal 814029/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 23000, signal 814670/874870 (executing program) 2021/03/14 00:43:07 fetching corpus: 23050, signal 814969/874882 (executing program) 2021/03/14 00:43:08 fetching corpus: 23100, signal 815260/874882 (executing program) 2021/03/14 00:43:08 fetching corpus: 23150, signal 816095/874882 (executing program) 2021/03/14 00:43:08 fetching corpus: 23200, signal 816914/874882 (executing program) 2021/03/14 00:43:08 fetching corpus: 23250, signal 817567/874882 (executing program) 2021/03/14 00:43:08 fetching corpus: 23300, signal 817954/874888 (executing program) 2021/03/14 00:43:08 fetching corpus: 23350, signal 818361/874894 (executing program) 2021/03/14 00:43:08 fetching corpus: 23400, signal 819246/874898 (executing program) 2021/03/14 00:43:08 fetching corpus: 23450, signal 819572/874898 (executing program) 2021/03/14 00:43:09 fetching corpus: 23500, signal 820264/874898 (executing program) 2021/03/14 00:43:09 fetching corpus: 23550, signal 820647/874913 (executing program) 2021/03/14 00:43:09 fetching corpus: 23600, signal 821212/874913 (executing program) 2021/03/14 00:43:09 fetching corpus: 23650, signal 821615/874913 (executing program) 2021/03/14 00:43:09 fetching corpus: 23700, signal 822011/874913 (executing program) 2021/03/14 00:43:09 fetching corpus: 23750, signal 822353/874913 (executing program) 2021/03/14 00:43:09 fetching corpus: 23800, signal 822884/874915 (executing program) 2021/03/14 00:43:10 fetching corpus: 23850, signal 823372/874918 (executing program) 2021/03/14 00:43:10 fetching corpus: 23900, signal 823708/874919 (executing program) 2021/03/14 00:43:10 fetching corpus: 23950, signal 824663/874919 (executing program) 2021/03/14 00:43:10 fetching corpus: 24000, signal 824862/874922 (executing program) 2021/03/14 00:43:10 fetching corpus: 24050, signal 825471/874922 (executing program) 2021/03/14 00:43:10 fetching corpus: 24100, signal 826037/874932 (executing program) 2021/03/14 00:43:11 fetching corpus: 24150, signal 826711/874932 (executing program) 2021/03/14 00:43:11 fetching corpus: 24200, signal 827431/874932 (executing program) 2021/03/14 00:43:11 fetching corpus: 24250, signal 827935/875012 (executing program) 2021/03/14 00:43:11 fetching corpus: 24300, signal 828322/875012 (executing program) 2021/03/14 00:43:11 fetching corpus: 24350, signal 828701/875012 (executing program) 2021/03/14 00:43:11 fetching corpus: 24400, signal 829222/875019 (executing program) 2021/03/14 00:43:11 fetching corpus: 24450, signal 829856/875020 (executing program) 2021/03/14 00:43:11 fetching corpus: 24500, signal 830327/875026 (executing program) 2021/03/14 00:43:11 fetching corpus: 24550, signal 830748/875039 (executing program) 2021/03/14 00:43:11 fetching corpus: 24600, signal 831351/875039 (executing program) 2021/03/14 00:43:12 fetching corpus: 24650, signal 831954/875039 (executing program) 2021/03/14 00:43:12 fetching corpus: 24700, signal 832521/875039 (executing program) 2021/03/14 00:43:12 fetching corpus: 24750, signal 832906/875085 (executing program) 2021/03/14 00:43:12 fetching corpus: 24800, signal 833260/875087 (executing program) 2021/03/14 00:43:12 fetching corpus: 24850, signal 833865/875088 (executing program) 2021/03/14 00:43:12 fetching corpus: 24900, signal 834396/875089 (executing program) 2021/03/14 00:43:12 fetching corpus: 24950, signal 835078/875119 (executing program) 2021/03/14 00:43:13 fetching corpus: 25000, signal 835371/875119 (executing program) 2021/03/14 00:43:13 fetching corpus: 25050, signal 835880/875119 (executing program) 2021/03/14 00:43:13 fetching corpus: 25100, signal 836997/875125 (executing program) 2021/03/14 00:43:13 fetching corpus: 25150, signal 837270/875132 (executing program) 2021/03/14 00:43:13 fetching corpus: 25200, signal 837902/875132 (executing program) 2021/03/14 00:43:14 fetching corpus: 25250, signal 838327/875139 (executing program) 2021/03/14 00:43:14 fetching corpus: 25300, signal 838758/875141 (executing program) 2021/03/14 00:43:14 fetching corpus: 25350, signal 839081/875141 (executing program) 2021/03/14 00:43:14 fetching corpus: 25400, signal 839803/875141 (executing program) 2021/03/14 00:43:14 fetching corpus: 25450, signal 840114/875141 (executing program) 2021/03/14 00:43:14 fetching corpus: 25500, signal 840603/875141 (executing program) 2021/03/14 00:43:14 fetching corpus: 25550, signal 840904/875141 (executing program) 2021/03/14 00:43:14 fetching corpus: 25600, signal 841740/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25650, signal 842204/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25700, signal 842786/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25750, signal 843351/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25800, signal 843606/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25850, signal 843960/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25900, signal 844140/875141 (executing program) 2021/03/14 00:43:15 fetching corpus: 25950, signal 844602/875144 (executing program) 2021/03/14 00:43:15 fetching corpus: 26000, signal 845045/875148 (executing program) 2021/03/14 00:43:15 fetching corpus: 26050, signal 845413/875148 (executing program) 2021/03/14 00:43:15 fetching corpus: 26100, signal 845684/875175 (executing program) 2021/03/14 00:43:16 fetching corpus: 26150, signal 846196/875177 (executing program) 2021/03/14 00:43:16 fetching corpus: 26200, signal 846492/875192 (executing program) 2021/03/14 00:43:16 fetching corpus: 26250, signal 847352/875192 (executing program) 2021/03/14 00:43:16 fetching corpus: 26300, signal 847936/875214 (executing program) 2021/03/14 00:43:16 fetching corpus: 26328, signal 848250/875214 (executing program) 2021/03/14 00:43:16 fetching corpus: 26328, signal 848250/875214 (executing program) 2021/03/14 00:43:18 starting 6 fuzzer processes 00:43:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf6, &(0x7f0000000240)=""/246, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:43:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x15, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf6, &(0x7f0000000240)=""/246, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:43:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 00:43:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf6, &(0x7f0000000240)=""/246, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:43:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 00:43:19 executing program 5: r0 = open(&(0x7f0000000700)='./bus\x00', 0x151042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 149.881895][ T8434] IPVS: ftp: loaded support on port[0] = 21 [ 150.054231][ T8436] IPVS: ftp: loaded support on port[0] = 21 [ 150.318096][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 150.441999][ T8438] IPVS: ftp: loaded support on port[0] = 21 [ 150.510215][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.519418][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.530888][ T8434] device bridge_slave_0 entered promiscuous mode [ 150.621153][ T8440] IPVS: ftp: loaded support on port[0] = 21 [ 150.627901][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.638174][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.654704][ T8434] device bridge_slave_1 entered promiscuous mode [ 150.704954][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.718420][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.730899][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 150.762333][ T8434] team0: Port device team_slave_0 added [ 150.842515][ T8434] team0: Port device team_slave_1 added [ 150.889408][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.909805][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.939717][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.973070][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.980964][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.008090][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.078398][ T8442] IPVS: ftp: loaded support on port[0] = 21 [ 151.138267][ T8434] device hsr_slave_0 entered promiscuous mode [ 151.145373][ T8434] device hsr_slave_1 entered promiscuous mode [ 151.155996][ T8438] chnl_net:caif_netlink_parms(): no params data found [ 151.212280][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.220019][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.230164][ T8436] device bridge_slave_0 entered promiscuous mode [ 151.259950][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.267783][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.277971][ T8436] device bridge_slave_1 entered promiscuous mode [ 151.486654][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.520906][ T8522] IPVS: ftp: loaded support on port[0] = 21 [ 151.554684][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.564593][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 151.634416][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.641593][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.650942][ T8438] device bridge_slave_0 entered promiscuous mode [ 151.691981][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.699718][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.709495][ T8438] device bridge_slave_1 entered promiscuous mode [ 151.728123][ T8436] team0: Port device team_slave_0 added [ 151.741727][ T8436] team0: Port device team_slave_1 added [ 151.814944][ T20] Bluetooth: hci0: command 0x0409 tx timeout [ 151.837648][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.845292][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.853679][ T8440] device bridge_slave_0 entered promiscuous mode [ 151.866339][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.873625][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.881729][ T8440] device bridge_slave_1 entered promiscuous mode [ 151.912748][ T8438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.942722][ T8438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.959147][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.966859][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.994012][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.009001][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.020060][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.049386][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.053488][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 152.066216][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 152.107327][ T8438] team0: Port device team_slave_0 added [ 152.126361][ T8438] team0: Port device team_slave_1 added [ 152.149970][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.180692][ T8436] device hsr_slave_0 entered promiscuous mode [ 152.195132][ T8436] device hsr_slave_1 entered promiscuous mode [ 152.202748][ T8436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.212177][ T8436] Cannot create hsr debugfs directory [ 152.231071][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.241864][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.251144][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.279894][ T8438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.300271][ T20] Bluetooth: hci2: command 0x0409 tx timeout [ 152.339500][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.347430][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.375914][ T8438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.422006][ T8440] team0: Port device team_slave_0 added [ 152.432491][ T8440] team0: Port device team_slave_1 added [ 152.538406][ T8438] device hsr_slave_0 entered promiscuous mode [ 152.559383][ T8438] device hsr_slave_1 entered promiscuous mode [ 152.569357][ T8438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.579512][ T8438] Cannot create hsr debugfs directory [ 152.614401][ T20] Bluetooth: hci3: command 0x0409 tx timeout [ 152.617629][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 152.640175][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.648230][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.677693][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.700940][ T8434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.717007][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.726775][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.737279][ T8442] device bridge_slave_0 entered promiscuous mode [ 152.753368][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.760449][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.787671][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.809053][ T8434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.819248][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.828863][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.838177][ T8442] device bridge_slave_1 entered promiscuous mode [ 152.853686][ T4898] Bluetooth: hci4: command 0x0409 tx timeout [ 152.875689][ T8434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.890422][ T8434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.938271][ T8440] device hsr_slave_0 entered promiscuous mode [ 152.945856][ T8440] device hsr_slave_1 entered promiscuous mode [ 152.952481][ T8440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.960484][ T8440] Cannot create hsr debugfs directory [ 152.977159][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.043599][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.180399][ T8442] team0: Port device team_slave_0 added [ 153.221085][ T8442] team0: Port device team_slave_1 added [ 153.247704][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.255368][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.264177][ T8522] device bridge_slave_0 entered promiscuous mode [ 153.301289][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.315430][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.326665][ T8522] device bridge_slave_1 entered promiscuous mode [ 153.342245][ T8436] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.361359][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.369253][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.396755][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.424172][ T3658] Bluetooth: hci5: command 0x0409 tx timeout [ 153.449662][ T8436] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.464547][ T8436] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.476864][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.485105][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.520376][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.555929][ T8436] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.579417][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.595056][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.657758][ T8442] device hsr_slave_0 entered promiscuous mode [ 153.668655][ T8442] device hsr_slave_1 entered promiscuous mode [ 153.677023][ T8442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.686575][ T8442] Cannot create hsr debugfs directory [ 153.715040][ T8438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.759729][ T8522] team0: Port device team_slave_0 added [ 153.774021][ T8522] team0: Port device team_slave_1 added [ 153.786946][ T8438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.805579][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.841524][ T8438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.879677][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.889088][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.896021][ T9574] Bluetooth: hci0: command 0x041b tx timeout [ 153.918450][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.936331][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.945066][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.972082][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.985882][ T8438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.997083][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.007970][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.038133][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.073968][ T8440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.097519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.108072][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.119613][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.127236][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.140803][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.150573][ T20] Bluetooth: hci1: command 0x041b tx timeout [ 154.176817][ T8440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.211905][ T8522] device hsr_slave_0 entered promiscuous mode [ 154.220959][ T8522] device hsr_slave_1 entered promiscuous mode [ 154.229914][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.239286][ T8522] Cannot create hsr debugfs directory [ 154.246806][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.258983][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.271916][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.279610][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.292495][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.323468][ T8440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.341036][ T8440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.373290][ T9654] Bluetooth: hci2: command 0x041b tx timeout [ 154.392157][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.402113][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.421727][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.432290][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.443867][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.462126][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.492434][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.501079][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.511465][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.581250][ T8434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.594423][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.604108][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.604819][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.643553][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.657145][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.681884][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.693189][ T3658] Bluetooth: hci3: command 0x041b tx timeout [ 154.700941][ T8442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.746564][ T8442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.790789][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.801015][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.812085][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.822024][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.829194][ T9714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.838229][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.848153][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.857511][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.864763][ T9714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.872640][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.881985][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.889899][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.900889][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.914958][ T8442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.933732][ T3658] Bluetooth: hci4: command 0x041b tx timeout [ 154.934945][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.963372][ T8442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.992249][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.058891][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.069151][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.080816][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.112479][ T8438] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.140476][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.150097][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.159483][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.170478][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.180766][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.190244][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.206586][ T8522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.217416][ T8522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.240313][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.253496][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.265535][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.292998][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.302374][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.319007][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.327758][ T9728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.337899][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.347569][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.357201][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.365943][ T9728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.378632][ T8522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.396844][ T8522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.435349][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.444745][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.456500][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.466746][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.482537][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.496767][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.504935][ T36] Bluetooth: hci5: command 0x041b tx timeout [ 155.531638][ T8434] device veth0_vlan entered promiscuous mode [ 155.548252][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.557302][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.566243][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.576656][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.586216][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.595562][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.606510][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.632597][ T8434] device veth1_vlan entered promiscuous mode [ 155.649507][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.659140][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.668290][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.677609][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.686875][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.696788][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.706261][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.718076][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.727962][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.738583][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.748380][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.756497][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.808975][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.818496][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.833032][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.841141][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.856861][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.885643][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.907487][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.921438][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.932403][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.942601][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.949925][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.958560][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.968742][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.982631][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.990684][ T36] Bluetooth: hci0: command 0x040f tx timeout [ 156.031231][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.041014][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.050889][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.062285][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.072148][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.081169][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.090498][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.099266][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.108460][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.145901][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.164727][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.173890][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.187620][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.200160][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.208570][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.213342][ T9745] Bluetooth: hci1: command 0x040f tx timeout [ 156.218525][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.233467][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.242404][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.252596][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.290941][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.302196][ T8434] device veth0_macvtap entered promiscuous mode [ 156.352026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.365533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.376814][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.386249][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.393872][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.402023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.411911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.421115][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.428276][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.436712][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.445945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.453201][ T9574] Bluetooth: hci2: command 0x040f tx timeout [ 156.453953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.479487][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.495082][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.515895][ T8434] device veth1_macvtap entered promiscuous mode [ 156.528174][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.544191][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.596441][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.613952][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.633322][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.642229][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.659781][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.671394][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.688107][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.706166][ T8436] device veth0_vlan entered promiscuous mode [ 156.753102][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.760978][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.774204][ T9574] Bluetooth: hci3: command 0x040f tx timeout [ 156.781167][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.791743][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.801365][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.810776][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.820225][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.829224][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.838969][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.849117][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.858987][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.885531][ T8442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.903801][ T8436] device veth1_vlan entered promiscuous mode [ 156.917209][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.925219][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.935532][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.950284][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.978621][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.987352][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.998045][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.007673][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.018521][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.028203][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.037595][ T36] Bluetooth: hci4: command 0x040f tx timeout [ 157.045514][ T8438] device veth0_vlan entered promiscuous mode [ 157.070129][ T8438] device veth1_vlan entered promiscuous mode [ 157.099167][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.114418][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.123233][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.131998][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.142388][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.149747][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.158333][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.168105][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.178553][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.185756][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.193989][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.201644][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.209474][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.218667][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.249882][ T8434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.260472][ T8434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.279444][ T8434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.291912][ T8434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.318952][ T8440] device veth0_vlan entered promiscuous mode [ 157.326967][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.340544][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.350461][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.360581][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.369578][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.378792][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.388928][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.401048][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.431701][ T8436] device veth0_macvtap entered promiscuous mode [ 157.452216][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.464879][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.477000][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.488349][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.516943][ T8436] device veth1_macvtap entered promiscuous mode [ 157.539232][ T8440] device veth1_vlan entered promiscuous mode [ 157.547664][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.558453][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.568643][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.580064][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.591556][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.604359][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.614135][ T36] Bluetooth: hci5: command 0x040f tx timeout [ 157.617515][ T8438] device veth0_macvtap entered promiscuous mode [ 157.656322][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.671095][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.682049][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.693338][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.708045][ T8438] device veth1_macvtap entered promiscuous mode [ 157.737298][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.757256][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.780077][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.807654][ T8522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.830185][ T8522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.863206][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.871315][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.886432][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.897969][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.909768][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.921757][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.933937][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.943386][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.963769][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.978132][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.991358][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.004451][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.041624][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.054919][ T3658] Bluetooth: hci0: command 0x0419 tx timeout [ 158.061287][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.073241][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.085118][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.098288][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.113341][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.124092][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.136869][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.149277][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.162459][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.174638][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.194099][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.223105][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.231976][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.260015][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.279499][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.304057][ T9745] Bluetooth: hci1: command 0x0419 tx timeout [ 158.327147][ T8438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.348719][ T8438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.358485][ T8438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.368429][ T8438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.404440][ T8436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.414947][ T8436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.425774][ T8436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.439559][ T8436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.450884][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.464060][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.471973][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.484008][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.496828][ T8440] device veth0_macvtap entered promiscuous mode [ 158.521756][ T8440] device veth1_macvtap entered promiscuous mode [ 158.534431][ T9746] Bluetooth: hci2: command 0x0419 tx timeout [ 158.543830][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.577243][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.607669][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.621616][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.641793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.652224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.663670][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.673629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.743142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.751797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.768936][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.783425][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.794674][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.815770][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.827331][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.839459][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.850467][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.860862][ T9746] Bluetooth: hci3: command 0x0419 tx timeout [ 158.871009][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.884959][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.917676][ T8442] device veth0_vlan entered promiscuous mode [ 158.948830][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.960350][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.986669][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 159.002310][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.014545][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 159.025599][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.035793][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 159.046431][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.057962][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.081863][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.093762][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.114621][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.123852][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.138193][ T8440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.147799][ T9745] Bluetooth: hci4: command 0x0419 tx timeout [ 159.151778][ T8440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.167444][ T8440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.179184][ T8440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.221036][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.257927][ T8442] device veth1_vlan entered promiscuous mode [ 159.298146][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.312825][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.321958][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.328682][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.394723][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.413317][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.448851][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.483285][ T379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.491459][ T379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.541028][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.557968][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.585480][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.604181][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.653580][ T9745] Bluetooth: hci5: command 0x0419 tx timeout [ 159.684682][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.713175][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.721444][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.773842][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.795912][ T8522] device veth0_vlan entered promiscuous mode [ 159.796656][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.849277][ T8442] device veth0_macvtap entered promiscuous mode [ 159.884761][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.907418][ T8522] device veth1_vlan entered promiscuous mode [ 159.935528][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.960781][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.972059][ T8442] device veth1_macvtap entered promiscuous mode [ 160.012875][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.021400][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.051909][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.091027][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.112168][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.234092][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.260703][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 160.261683][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.321957][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.325067][ T9847] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 160.366852][ T9847] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 160.368260][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:43:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000010401010000000000000000070000040600064000010000000004400000000605000100020000"], 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) [ 160.433698][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.487149][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 160.518641][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.557679][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 160.597726][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.642137][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.673622][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.687287][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.703319][ T9852] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.717242][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 00:43:30 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 160.765437][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 160.801053][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.821317][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 160.834059][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.844920][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 160.858170][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.869126][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 160.880266][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.933714][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.953629][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.977501][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 00:43:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) fspick(0xffffffffffffffff, 0x0, 0x0) 00:43:31 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0185879, 0x0) [ 161.014727][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 00:43:31 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:43:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x6, 0x199, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 161.068443][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.105040][ T8522] device veth0_macvtap entered promiscuous mode [ 161.122076][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.183065][ T8442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.191872][ T8442] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.261500][ T8442] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.309672][ T8442] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:43:31 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:43:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:31 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) [ 161.362057][ T8522] device veth1_macvtap entered promiscuous mode [ 161.499869][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:43:31 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec58000000000000000081baf9459c5c953948c6801f2c0945c08ba8000063dfe6da5bec97a324016f7b7fa4981ffc99a7422007653872ecb4f63adb415ccdfe808101000100000000004f2a88d2fbea75e16a61fd063f026ed7360627ec60ca274e00da971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a34290365194a47871a079242514ddb61c548aa5f6486b1aa16690cfe6cdda6f9bb47f852571169"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 161.550054][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.587712][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.626274][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.658858][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.678906][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.691213][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.702640][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.715280][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.733037][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.765337][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.819110][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.839986][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.862212][ C1] hrtimer: interrupt took 94576 ns [ 161.885413][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 161.931123][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.953612][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.003684][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.042207][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.070936][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.093061][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.110571][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.122056][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.139084][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.152465][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.166186][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.199182][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.220027][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.292036][ T8522] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.310204][ T8522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.325259][ T8522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.335899][ T8522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.422339][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 162.444854][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.488054][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.538210][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.567696][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.586653][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.593444][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.622770][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.635756][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.660915][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.693284][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.716584][ T7] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 162.747203][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.750362][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.772655][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.782059][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:43:33 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x10000}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) [ 162.892967][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 162.910308][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.932771][ T7] usb 4-1: Product: syz [ 162.941811][ T7] usb 4-1: Manufacturer: syz [ 162.954615][ T7] usb 4-1: SerialNumber: syz 00:43:33 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:33 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:43:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0xa, 0xa, 0x301}, 0x14}}, 0x0) 00:43:33 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:33 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000e00)={0x0, &(0x7f0000000dc0)=""/33}) syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x2, 0x2) 00:43:33 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) [ 163.299973][ T7] usb 4-1: USB disconnect, device number 2 00:43:33 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 163.707600][ T9950] device wlan1 entered promiscuous mode [ 163.742158][ T3817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.864829][ T9946] device wlan1 left promiscuous mode [ 164.012132][ T3817] usb 1-1: Using ep0 maxpacket: 32 [ 164.022081][ T9969] device wlan1 entered promiscuous mode [ 164.122873][ T9571] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.232754][ T3817] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 164.244057][ T3817] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 164.372841][ T9571] usb 4-1: Using ep0 maxpacket: 32 [ 164.433171][ T3817] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 164.450280][ T3817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.461333][ T3817] usb 1-1: Product: ࠄ [ 164.474063][ T3817] usb 1-1: Manufacturer: 䐮 [ 164.494925][ T3817] usb 1-1: SerialNumber: Ь [ 164.542586][ T9571] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.622561][ T9571] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.652135][ T9571] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:43:34 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:34 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 164.792846][ T3817] usb 1-1: USB disconnect, device number 2 00:43:34 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:34 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) [ 164.912259][ T9571] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 164.944483][ T9571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:43:35 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) [ 164.976391][ T9571] usb 4-1: Product: syz 00:43:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) [ 165.009793][ T9996] device wlan1 left promiscuous mode [ 165.023059][ T9571] usb 4-1: can't set config #1, error -71 00:43:35 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 165.082643][ T9571] usb 4-1: USB disconnect, device number 3 00:43:35 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) [ 165.428938][T10003] device wlan1 entered promiscuous mode [ 165.462106][ T9571] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.542049][ T4898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.722096][ T9571] usb 4-1: Using ep0 maxpacket: 32 [ 165.781964][ T4898] usb 1-1: Using ep0 maxpacket: 32 [ 165.912957][ T9571] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.012108][ T4898] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 166.022653][ T9571] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.037225][ T4898] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 166.052073][ T9571] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 166.242615][ T4898] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 166.252577][ T9571] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 166.261634][ T9571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.272450][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.280519][ T4898] usb 1-1: Product: ࠄ [ 166.286507][ T9571] usb 4-1: Product: syz [ 166.290725][ T9571] usb 4-1: Manufacturer: syz [ 166.296424][ T4898] usb 1-1: Manufacturer: 䐮 [ 166.301153][ T4898] usb 1-1: SerialNumber: Ь [ 166.306093][ T9571] usb 4-1: SerialNumber: syz 00:43:36 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000e00)={0x0, &(0x7f0000000dc0)=""/33}) syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x2, 0x2) 00:43:36 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:36 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:36 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 166.503458][ T4898] usb 1-1: USB disconnect, device number 3 00:43:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) [ 166.583468][T10046] device wlan1 left promiscuous mode 00:43:36 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) [ 166.695880][ T9571] usb 4-1: USB disconnect, device number 4 [ 166.813178][T10051] device wlan1 entered promiscuous mode [ 166.972130][ T4898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.211983][ T4898] usb 1-1: Using ep0 maxpacket: 32 00:43:37 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:37 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:37 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 167.357140][T10073] device wlan1 left promiscuous mode 00:43:37 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 167.452219][ T4898] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 167.483281][ T4898] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 167.662056][ T9746] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.692140][ T4898] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 167.703216][T10079] device wlan1 entered promiscuous mode [ 167.718774][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.763114][ T4898] usb 1-1: Product: ࠄ [ 167.781340][ T4898] usb 1-1: Manufacturer: 䐮 [ 167.809818][ T4898] usb 1-1: SerialNumber: Ь [ 167.921929][ T9746] usb 4-1: Using ep0 maxpacket: 32 [ 168.081981][ T9746] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.153369][ T4898] usb 1-1: USB disconnect, device number 4 [ 168.163331][ T9746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.174871][ T9746] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 168.342036][ T9746] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 168.351248][ T9746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.360673][ T9746] usb 4-1: Product: syz [ 168.365969][ T9746] usb 4-1: Manufacturer: syz [ 168.370854][ T9746] usb 4-1: SerialNumber: syz 00:43:38 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000e00)={0x0, &(0x7f0000000dc0)=""/33}) syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x2, 0x2) 00:43:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:38 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:38 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:38 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 168.677952][ T9746] usb 4-1: USB disconnect, device number 5 [ 168.733028][T10107] device wlan1 left promiscuous mode 00:43:38 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) [ 169.071862][ T9787] usb 1-1: new high-speed USB device number 5 using dummy_hcd 00:43:39 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:39 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:39 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 169.321938][ T9787] usb 1-1: Using ep0 maxpacket: 32 00:43:39 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) [ 169.552062][ T9787] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 169.568720][ T9787] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 169.611827][ T9746] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.781931][ T9787] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 169.806596][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.841615][ T9787] usb 1-1: Product: ࠄ [ 169.846219][ T9787] usb 1-1: Manufacturer: 䐮 [ 169.850858][ T9787] usb 1-1: SerialNumber: Ь [ 169.871955][ T9746] usb 4-1: Using ep0 maxpacket: 32 [ 170.032046][ T9746] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.112033][ T9746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.130711][ T9746] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 170.143760][ T9787] usb 1-1: USB disconnect, device number 5 [ 170.312052][ T9746] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 170.321404][ T9746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.332074][ T9746] usb 4-1: Product: syz [ 170.336299][ T9746] usb 4-1: Manufacturer: syz [ 170.341172][ T9746] usb 4-1: SerialNumber: syz 00:43:40 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000e00)={0x0, &(0x7f0000000dc0)=""/33}) syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x2, 0x2) 00:43:40 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:40 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:40 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 170.623919][ T9746] usb 4-1: USB disconnect, device number 6 00:43:40 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) [ 170.907204][T10173] device wlan1 entered promiscuous mode [ 171.081575][ T9787] usb 1-1: new high-speed USB device number 6 using dummy_hcd 00:43:41 executing program 3: 00:43:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:41 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:41 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:41 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 171.381890][ T9787] usb 1-1: Using ep0 maxpacket: 32 [ 171.612081][ T9787] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 171.631859][ T9787] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 171.862123][ T9787] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 171.871815][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.880010][ T9787] usb 1-1: Product: ࠄ [ 171.884988][ T9787] usb 1-1: Manufacturer: 䐮 [ 171.889719][ T9787] usb 1-1: SerialNumber: Ь [ 172.176075][ T9787] usb 1-1: USB disconnect, device number 6 00:43:42 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000e00)={0x0, &(0x7f0000000dc0)=""/33}) 00:43:42 executing program 3: 00:43:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:42 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:42 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:42 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:42 executing program 3: 00:43:42 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:42 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:43 executing program 3: syz_usb_connect$hid(0x0, 0x3f, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) [ 173.101627][ T9787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.371756][ T9787] usb 1-1: Using ep0 maxpacket: 32 [ 173.601931][ T9787] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 173.633837][ T9787] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 173.821668][ T9787] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 173.832105][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.840886][ T9787] usb 1-1: Product: ࠄ [ 173.849859][ T9787] usb 1-1: Manufacturer: 䐮 [ 173.856724][ T9787] usb 1-1: SerialNumber: Ь [ 174.139382][ T9787] usb 1-1: USB disconnect, device number 7 00:43:44 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:43:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:44 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:44 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:44 executing program 3: syz_usb_connect$hid(0x0, 0x3f, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:44 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:44 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:45 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 175.031433][ T9571] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.292131][ T9571] usb 1-1: Using ep0 maxpacket: 32 [ 175.548682][ T9571] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 175.578020][ T9571] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 175.801592][ T9571] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 175.810939][ T9571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.824303][ T9571] usb 1-1: Product: ࠄ [ 175.828871][ T9571] usb 1-1: Manufacturer: 䐮 [ 175.834982][ T9571] usb 1-1: SerialNumber: Ь [ 176.124575][ T9571] usb 1-1: USB disconnect, device number 8 00:43:46 executing program 0: 00:43:46 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:46 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:46 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:46 executing program 3: syz_usb_connect$hid(0x0, 0x3f, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:46 executing program 5: socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:46 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:46 executing program 0: 00:43:47 executing program 0: 00:43:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:47 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:47 executing program 5: socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:47 executing program 0: syz_usb_connect$hid(0x0, 0x3f, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:43:47 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:47 executing program 5: socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:47 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:47 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) [ 177.621166][ T9745] usb 4-1: new high-speed USB device number 7 using dummy_hcd 00:43:47 executing program 0: syz_usb_connect$hid(0x0, 0x3f, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 177.832596][ T9745] usb 4-1: device descriptor read/64, error 18 [ 178.101214][ T9745] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.294106][ T9745] usb 4-1: device descriptor read/64, error 18 [ 178.431445][ T9745] usb usb4-port1: attempt power cycle [ 179.141219][ T9745] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.341402][ T9745] usb 4-1: device descriptor read/8, error -61 [ 179.611073][ T9745] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.781596][ T9745] usb 4-1: device descriptor read/8, error -61 [ 179.901936][ T9745] usb usb4-port1: unable to enumerate USB device 00:43:50 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:50 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:43:50 executing program 0: syz_usb_connect$hid(0x0, 0x3f, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:43:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x0) 00:43:50 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:50 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:50 executing program 5: socket$kcm(0x29, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x0) [ 180.790982][ T9745] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.980922][ T9745] usb 4-1: device descriptor read/64, error 18 [ 181.251171][ T9745] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.451065][ T9745] usb 4-1: device descriptor read/64, error 18 [ 181.573258][ T9745] usb usb4-port1: attempt power cycle [ 182.281068][ T9745] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.451076][ T9745] usb 4-1: device descriptor read/8, error -61 [ 182.720959][ T9745] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.901082][ T9745] usb 4-1: device descriptor read/8, error -61 [ 183.022651][ T9745] usb usb4-port1: unable to enumerate USB device 00:43:53 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:53 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:53 executing program 5: socket$kcm(0x29, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x0) 00:43:53 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:43:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:43:53 executing program 5: socket$kcm(0x29, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:53 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:43:53 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 183.860885][ T9787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.910880][ T9746] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 184.067602][ T9787] usb 1-1: device descriptor read/64, error 18 [ 184.101629][ T9746] usb 4-1: device descriptor read/64, error 18 [ 184.341028][ T9787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.371386][ T9746] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 184.550808][ T9787] usb 1-1: device descriptor read/64, error 18 [ 184.590827][ T9746] usb 4-1: device descriptor read/64, error 18 [ 184.670959][ T9787] usb usb1-port1: attempt power cycle [ 184.711035][ T9746] usb usb4-port1: attempt power cycle [ 185.381727][ T9787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.440839][ T9746] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 185.585220][ T9787] usb 1-1: device descriptor read/8, error -61 [ 185.610981][ T9746] usb 4-1: device descriptor read/8, error -61 [ 185.870656][ T9787] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.880653][ T9746] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.040761][ T9787] usb 1-1: device descriptor read/8, error -61 [ 186.080949][ T9746] usb 4-1: device descriptor read/8, error -61 [ 186.161104][ T9787] usb usb1-port1: unable to enumerate USB device [ 186.200937][ T9746] usb usb4-port1: unable to enumerate USB device 00:43:56 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:56 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:43:56 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:56 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:43:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:43:56 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:56 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:57 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) [ 186.980664][ T9787] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.040568][ T9574] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.230740][ T9787] usb 1-1: device descriptor read/64, error 18 [ 187.240761][ T9574] usb 4-1: device descriptor read/64, error 18 [ 187.510655][ T9787] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 187.528576][ T9574] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 187.720628][ T9787] usb 1-1: device descriptor read/64, error 18 [ 187.720659][ T9574] usb 4-1: device descriptor read/64, error 18 [ 187.843342][ T9787] usb usb1-port1: attempt power cycle [ 187.850877][ T9574] usb usb4-port1: attempt power cycle [ 188.560559][ T9574] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.580593][ T9787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 188.730925][ T9574] usb 4-1: device descriptor read/8, error -61 [ 188.790565][ T9787] usb 1-1: device descriptor read/8, error -61 [ 189.000455][ T9574] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 189.080568][ T9787] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 189.171002][ T9574] usb 4-1: device descriptor read/8, error -61 [ 189.270556][ T9787] usb 1-1: device descriptor read/8, error -61 [ 189.290695][ T9574] usb usb4-port1: unable to enumerate USB device [ 189.400737][ T9787] usb usb1-port1: unable to enumerate USB device 00:43:59 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:43:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:43:59 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:43:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:43:59 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:43:59 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:00 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:44:00 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:00 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 190.131640][ T3817] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 190.210527][ T9745] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 190.340521][ T3817] usb 1-1: device descriptor read/64, error 18 [ 190.430442][ T9745] usb 4-1: device descriptor read/64, error 18 [ 190.620677][ T3817] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.700393][ T9745] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 190.810397][ T3817] usb 1-1: device descriptor read/64, error 18 [ 190.890435][ T9745] usb 4-1: device descriptor read/64, error 18 [ 190.930645][ T3817] usb usb1-port1: attempt power cycle [ 191.010602][ T9745] usb usb4-port1: attempt power cycle [ 191.650522][ T3817] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 191.731101][ T9745] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 191.820844][ T3817] usb 1-1: device descriptor read/8, error -61 [ 191.910453][ T9745] usb 4-1: device descriptor read/8, error -61 [ 192.090372][ T3817] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 192.180422][ T9745] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 192.260687][ T3817] usb 1-1: device descriptor read/8, error -61 [ 192.370683][ T9745] usb 4-1: device descriptor read/8, error -61 [ 192.383025][ T3817] usb usb1-port1: unable to enumerate USB device [ 192.500510][ T9745] usb usb4-port1: unable to enumerate USB device 00:44:02 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}]}, 0x34}}, 0x0) 00:44:02 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:02 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:02 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:03 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}]}, 0x34}}, 0x0) 00:44:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:03 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:03 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}]}, 0x34}}, 0x0) [ 193.240379][ T3817] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 193.311585][ T9571] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 193.430476][ T3817] usb 1-1: device descriptor read/64, error 18 [ 193.510263][ T9571] usb 4-1: device descriptor read/64, error 18 [ 193.702963][ T3817] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 193.780346][ T9571] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 193.900436][ T3817] usb 1-1: device descriptor read/64, error 18 [ 193.970429][ T9571] usb 4-1: device descriptor read/64, error 18 [ 194.021234][ T3817] usb usb1-port1: attempt power cycle [ 194.091634][ T9571] usb usb4-port1: attempt power cycle [ 194.372632][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379019][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.730181][ T3817] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 194.810509][ T9571] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 194.910379][ T3817] usb 1-1: device descriptor read/8, error -61 [ 195.000686][ T9571] usb 4-1: device descriptor read/8, error -61 [ 195.180180][ T3817] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 195.280440][ T9571] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 195.370658][ T3817] usb 1-1: device descriptor read/8, error -61 [ 195.480329][ T9571] usb 4-1: device descriptor read/8, error -61 [ 195.503082][ T3817] usb usb1-port1: unable to enumerate USB device [ 195.600571][ T9571] usb usb4-port1: unable to enumerate USB device 00:44:06 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:06 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:06 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:06 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:06 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:06 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:06 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) [ 196.350196][ T9574] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 196.440324][ T9745] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 196.540123][ T9574] usb 1-1: device descriptor read/64, error 18 [ 196.690271][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 196.810211][ T9574] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 196.850675][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.865037][ T9745] usb 4-1: no configurations [ 196.880383][ T9745] usb 4-1: can't read configurations, error -22 [ 197.010062][ T9574] usb 1-1: device descriptor read/64, error 18 [ 197.040282][ T9745] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 197.130304][ T9574] usb usb1-port1: attempt power cycle [ 197.280178][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 197.440216][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.448187][ T9745] usb 4-1: no configurations [ 197.453595][ T9745] usb 4-1: can't read configurations, error -22 [ 197.460815][ T9745] usb usb4-port1: attempt power cycle [ 197.840125][ T9574] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 198.010478][ T9574] usb 1-1: device descriptor read/8, error -61 [ 198.190095][ T9745] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 198.280034][ T9574] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 198.288399][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 198.460468][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.468558][ T9745] usb 4-1: no configurations [ 198.474060][ T9745] usb 4-1: can't read configurations, error -22 [ 198.481883][ T9574] usb 1-1: device descriptor read/8, error -61 [ 198.600953][ T9574] usb usb1-port1: unable to enumerate USB device [ 198.640028][ T9745] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 198.750018][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 198.920075][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.928222][ T9745] usb 4-1: no configurations [ 198.941047][ T9745] usb 4-1: can't read configurations, error -22 [ 198.948099][ T9745] usb usb4-port1: unable to enumerate USB device 00:44:09 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x40}}, 0x0) 00:44:09 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:09 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:09 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:09 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:09 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) [ 199.440041][ T9571] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 199.529989][ T4898] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 199.660039][ T9571] usb 1-1: device descriptor read/64, error 18 [ 199.780076][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 199.929960][ T9571] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 199.940217][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.948061][ T4898] usb 4-1: no configurations [ 199.980293][ T4898] usb 4-1: can't read configurations, error -22 [ 200.150093][ T4898] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 200.160937][ T9571] usb 1-1: device descriptor read/64, error 18 [ 200.280053][ T9571] usb usb1-port1: attempt power cycle [ 200.389829][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 200.549971][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.559219][ T4898] usb 4-1: no configurations [ 200.565306][ T4898] usb 4-1: can't read configurations, error -22 [ 200.572769][ T4898] usb usb4-port1: attempt power cycle [ 201.000404][ T9571] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 201.190004][ T9571] usb 1-1: device descriptor read/8, error -61 [ 201.289852][ T4898] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 201.401843][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 201.469850][ T9571] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 201.573407][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.581952][ T4898] usb 4-1: no configurations [ 201.586653][ T4898] usb 4-1: can't read configurations, error -22 [ 201.660479][ T9571] usb 1-1: device descriptor read/8, error -61 [ 201.759811][ T4898] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 201.781290][ T9571] usb usb1-port1: unable to enumerate USB device [ 201.881079][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 202.060311][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.068555][ T4898] usb 4-1: no configurations [ 202.073826][ T4898] usb 4-1: can't read configurations, error -22 [ 202.080899][ T4898] usb usb4-port1: unable to enumerate USB device 00:44:12 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:12 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:12 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:12 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140100909"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:12 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:12 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 202.600275][ T9745] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 202.659929][ T4898] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 202.859898][ T9745] usb 1-1: Using ep0 maxpacket: 32 [ 202.919758][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 203.059822][ T9745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.070870][ T9745] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 203.111956][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.121943][ T4898] usb 4-1: no configurations [ 203.126599][ T4898] usb 4-1: can't read configurations, error -22 [ 203.239930][ T9745] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 203.249208][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.257836][ T9745] usb 1-1: Product: ࠄ [ 203.262214][ T9745] usb 1-1: Manufacturer: 䐮 [ 203.266851][ T9745] usb 1-1: SerialNumber: Ь [ 203.289739][ T4898] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 203.552060][ T9745] usb 1-1: USB disconnect, device number 33 [ 203.573567][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 203.739958][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.748130][ T4898] usb 4-1: no configurations [ 203.754616][ T4898] usb 4-1: can't read configurations, error -22 [ 203.763231][ T4898] usb usb4-port1: attempt power cycle [ 204.470616][ T4898] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 204.559977][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 204.719692][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.727511][ T4898] usb 4-1: no configurations [ 204.733969][ T4898] usb 4-1: can't read configurations, error -22 [ 204.899639][ T4898] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 205.010321][ T4898] usb 4-1: Using ep0 maxpacket: 32 [ 205.199803][ T4898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.207946][ T4898] usb 4-1: no configurations [ 205.218361][ T4898] usb 4-1: can't read configurations, error -22 [ 205.225293][ T4898] usb usb4-port1: unable to enumerate USB device 00:44:15 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a1a2f4d0fb34"}]}, 0x38}}, 0x0) 00:44:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:15 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:15 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140100909"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:15 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:15 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09058103000408800609050203ff03038109"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000e00)={0x0, &(0x7f0000000dc0)=""/33}) syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x2, 0x2) 00:44:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x200000}], 0x1, 0x0, 0x0) 00:44:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:15 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 205.699727][ T9571] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 205.759848][ T9745] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 205.901036][ T9787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 205.966597][ T9571] usb 1-1: Using ep0 maxpacket: 32 [ 206.019824][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 206.169626][ T9787] usb 3-1: Using ep0 maxpacket: 32 [ 206.180908][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.212265][ T9571] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.222808][ T9571] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 206.309694][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 206.317580][ T9745] usb 4-1: can't read configurations, error -61 [ 206.399834][ T9571] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 206.409891][ T9787] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 206.420573][ T9571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.428845][ T9571] usb 1-1: Product: ࠄ [ 206.433273][ T9787] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 206.442690][ T9571] usb 1-1: Manufacturer: 䐮 [ 206.447352][ T9571] usb 1-1: SerialNumber: Ь [ 206.469511][ T9745] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 206.629730][ T9787] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 206.639373][ T9787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.648000][ T9787] usb 3-1: Product: ࠄ [ 206.652940][ T9787] usb 3-1: Manufacturer: 䐮 [ 206.658390][ T9787] usb 3-1: SerialNumber: Ь [ 206.719652][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 206.735282][ T9571] usb 1-1: USB disconnect, device number 34 [ 206.880058][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.983651][ T9787] usb 3-1: USB disconnect, device number 2 [ 207.000128][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 207.007879][ T9745] usb 4-1: can't read configurations, error -61 [ 207.016459][ T9745] usb usb4-port1: attempt power cycle [ 207.730934][ T9745] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 207.829684][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 207.990457][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.109825][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 208.117754][ T9745] usb 4-1: can't read configurations, error -61 [ 208.279546][ T9745] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 208.379885][ T9745] usb 4-1: Using ep0 maxpacket: 32 00:44:18 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 00:44:18 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 00:44:18 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:18 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:18 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00010140100909"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 208.499589][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short 00:44:18 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 208.579626][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 208.592203][ T9745] usb 4-1: can't read configurations, error -71 00:44:18 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9=\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda=C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 00:44:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) [ 208.631274][ T9745] usb usb4-port1: unable to enumerate USB device 00:44:18 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) 00:44:18 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 208.819641][ T4898] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 208.829454][ T9574] usb 3-1: new high-speed USB device number 3 using dummy_hcd 00:44:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) [ 209.018846][ T9745] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 209.079571][ T9574] usb 3-1: Using ep0 maxpacket: 32 [ 209.089970][ T4898] usb 1-1: Using ep0 maxpacket: 32 [ 209.243991][ T9574] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.270671][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 209.299800][ T4898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.318636][ T4898] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 209.346660][ T9574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.363716][ T9574] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 209.429808][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.511443][ T4898] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 209.521780][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.534023][ T4898] usb 1-1: Product: ࠄ [ 209.538573][ T4898] usb 1-1: Manufacturer: 䐮 [ 209.545620][ T4898] usb 1-1: SerialNumber: Ь [ 209.546064][ T9574] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 209.559654][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 209.568626][ T9745] usb 4-1: can't read configurations, error -61 [ 209.589425][ T9574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.606706][ T9574] usb 3-1: Product: syz [ 209.613236][ T9574] usb 3-1: Manufacturer: syz [ 209.618113][ T9574] usb 3-1: SerialNumber: syz [ 209.759459][ T9745] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 209.841520][ T4898] usb 1-1: USB disconnect, device number 35 [ 209.911274][ T9574] usb 3-1: USB disconnect, device number 3 [ 209.999469][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 210.159544][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.285168][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 210.294743][ T9745] usb 4-1: can't read configurations, error -61 [ 210.307749][ T9745] usb usb4-port1: attempt power cycle [ 211.019397][ T9745] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 211.119696][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 211.299427][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.419589][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 211.419638][ T9745] usb 4-1: can't read configurations, error -61 00:44:21 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:21 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xb9, 0xe4, 0x40, 0x9c0, 0x206, 0x1163, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x2c, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0xf, 0x50, "deef1208a8c363ba105d822ac90bb917ca5bdc235950ef0ce02d30b057ca880848e2e71a8f7e9f8e0d87e2e579fc88915530d75fff3e90fe28352e3453261507e2be6d5f568bb9ea6df7ce1aa76fb086"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xb4, "24973012d73a44bb48edebf43cb2182c16e4f999cb0fb5cdaf69fa62dc3e4cc498006b17001bc6e5e3b5b6a0e2003de397f962d1d3ca21ac313ef2efd10ec99dc21520bcb976d177de158c6f5184e747f9024fca44c7744ea4b79709624c2491db8f915f34fb00b80cda894c38197ff804260370cac381f4d4d7302806d23d949864403611d0350f25fbc74b8d9a02625a27b236c4e077ca9dd1f7082643351a2c2084d63d2c901e57c1a6f1448256f2334356b8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 00:44:21 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) 00:44:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:44:21 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c0905810300"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x400007f}, 0x0, 0x6, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') [ 211.569311][ T9745] usb 4-1: new high-speed USB device number 50 using dummy_hcd 00:44:21 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) 00:44:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:44:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x400007f}, 0x0, 0x6, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') [ 211.809808][ T9745] usb 4-1: device not accepting address 50, error -71 [ 211.820888][ T9745] usb usb4-port1: unable to enumerate USB device 00:44:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x400007f}, 0x0, 0x6, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 00:44:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 211.909479][ T4898] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 211.921676][ T9787] usb 5-1: new high-speed USB device number 2 using dummy_hcd 00:44:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) [ 212.135151][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.168824][ T4898] usb 1-1: Using ep0 maxpacket: 32 [ 212.186917][T10861] bridge1: port 1(syz_tun) entered blocking state [ 212.189425][ T9745] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 212.199116][T10861] bridge1: port 1(syz_tun) entered disabled state [ 212.210173][T10861] device syz_tun entered promiscuous mode [ 212.235457][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.339782][ T9787] usb 5-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=11.63 [ 212.357452][ T9787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.391425][ T9787] usb 5-1: config 0 descriptor?? [ 212.433165][ T4898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.443565][ T4898] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 212.458246][ T9787] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 212.459341][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 212.629686][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.639564][ T4898] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 212.648981][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.690365][ T4898] usb 1-1: Product: ࠄ [ 212.694790][ T4898] usb 1-1: Manufacturer: 䐮 [ 212.702373][ T4898] usb 1-1: SerialNumber: Ь [ 212.759756][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 212.767805][ T9745] usb 4-1: can't read configurations, error -61 [ 212.919322][ T9745] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 212.993687][ T4898] usb 1-1: USB disconnect, device number 36 [ 213.119498][ T9787] gp8psk: usb in 137 operation failed. [ 213.126784][ T9787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.159316][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 213.175965][ T9787] dvbdev: DVB: registering new adapter (Genpix SkyWalker-2 DVB-S receiver) [ 213.186378][ T9787] usb 5-1: media controller created [ 213.202649][ T9787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.232040][ T9787] gp8psk_fe: Frontend attached [ 213.237506][ T9787] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 213.270124][ T9787] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 213.325698][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.409553][ T9787] gp8psk: usb in 138 operation failed. [ 213.415397][ T9787] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully initialized and connected. [ 213.426585][ T9787] gp8psk: found Genpix USB device pID = 206 (hex) [ 213.437015][ T9787] usb 5-1: USB disconnect, device number 2 [ 213.459423][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 213.467195][ T9745] usb 4-1: can't read configurations, error -61 [ 213.495305][ T9745] usb usb4-port1: attempt power cycle [ 213.528500][ T9787] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully deinitialized and disconnected. [ 213.999219][ T9787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 214.239248][ T9745] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 214.330121][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 214.389418][ T9787] usb 5-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=11.63 [ 214.399216][ T9787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.420373][ T9787] usb 5-1: config 0 descriptor?? [ 214.461016][ T9787] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 214.489638][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.620000][ T9745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 214.627658][ T9745] usb 4-1: can't read configurations, error -61 [ 214.649225][ T9787] gp8psk: usb in 128 operation failed. 00:44:24 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:24 executing program 5: r0 = memfd_create(&(0x7f0000000080)='Nwl\xabn\x91\xfe5\x9b\x8e<\x16\xa0', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 00:44:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) 00:44:24 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000e80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000000700fff64017db9820000000000000d423ffff630627e59aa146175dd106736d173f0fc7ec6e260400000000"], 0x259) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0) 00:44:24 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d0001014010090909"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:24 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xb9, 0xe4, 0x40, 0x9c0, 0x206, 0x1163, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x2c, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0xf, 0x50, "deef1208a8c363ba105d822ac90bb917ca5bdc235950ef0ce02d30b057ca880848e2e71a8f7e9f8e0d87e2e579fc88915530d75fff3e90fe28352e3453261507e2be6d5f568bb9ea6df7ce1aa76fb086"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xb4, "24973012d73a44bb48edebf43cb2182c16e4f999cb0fb5cdaf69fa62dc3e4cc498006b17001bc6e5e3b5b6a0e2003de397f962d1d3ca21ac313ef2efd10ec99dc21520bcb976d177de158c6f5184e747f9024fca44c7744ea4b79709624c2491db8f915f34fb00b80cda894c38197ff804260370cac381f4d4d7302806d23d949864403611d0350f25fbc74b8d9a02625a27b236c4e077ca9dd1f7082643351a2c2084d63d2c901e57c1a6f1448256f2334356b8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 214.679387][ T9787] gp8psk: usb in 137 operation failed. [ 214.693111][ T9787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.734282][ T9787] dvbdev: DVB: registering new adapter (Genpix SkyWalker-2 DVB-S receiver) [ 214.760750][ T9787] usb 5-1: media controller created [ 214.799405][T10922] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 214.822529][ T9787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.823821][T10927] Please use ioctl(SG_SUBMIT_V3) instead of write(), [ 214.823821][T10927] See: http://sg.danny.cz/sg/sg_v40.html 00:44:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) [ 214.848742][ T9787] gp8psk_fe: Frontend attached [ 214.867858][ T9787] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 214.913905][ T9787] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. 00:44:25 executing program 5: r0 = memfd_create(&(0x7f0000000080)='Nwl\xabn\x91\xfe5\x9b\x8e<\x16\xa0', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 215.059347][ T9787] gp8psk: usb in 138 operation failed. [ 215.065035][ T9787] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully initialized and connected. 00:44:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xb9, 0xe4, 0x40, 0x9c0, 0x206, 0x1163, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x2c, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0xf, 0x50, "deef1208a8c363ba105d822ac90bb917ca5bdc235950ef0ce02d30b057ca880848e2e71a8f7e9f8e0d87e2e579fc88915530d75fff3e90fe28352e3453261507e2be6d5f568bb9ea6df7ce1aa76fb086"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xb4, "24973012d73a44bb48edebf43cb2182c16e4f999cb0fb5cdaf69fa62dc3e4cc498006b17001bc6e5e3b5b6a0e2003de397f962d1d3ca21ac313ef2efd10ec99dc21520bcb976d177de158c6f5184e747f9024fca44c7744ea4b79709624c2491db8f915f34fb00b80cda894c38197ff804260370cac381f4d4d7302806d23d949864403611d0350f25fbc74b8d9a02625a27b236c4e077ca9dd1f7082643351a2c2084d63d2c901e57c1a6f1448256f2334356b8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 215.108479][ T9787] gp8psk: found Genpix USB device pID = 206 (hex) [ 215.126266][ T9787] usb 5-1: USB disconnect, device number 3 00:44:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000010c0)='w\xfcJ&\xc7\xba;o\xcc\xec\b\xe1B\x9e\x88\xf1l\xcd\x0e\x00\x00\x1b\xae\xd0\bc\xab\x94q\xa6\x1e56a\xde\f\xf3I5f\xed0\x16\x91\f\x8a\xbc\xd15\xff\xbe\xcaD5S\xda\xb7\xd7\x8c&\\\n\xbe\xd6\xfdf*a:\x95<\xdbEE\xd0,\xa0Lx\x01\x17\xa4\xee\xfb\xd5\xb2\ny\xab\xd1_@\xdd\x1c\xb6\xc7\nj\xf4&\xbe~m\xa3\x8aP\x8e\xfew /\xe4\x00\x00\x00\x00\x00\x00\x00\x00J\xbb\'\xf1\xf3\x1aF\fNC\xb5b\xe2;\xa4\rfY\xd2Z\xfc\xea\xe6\x81\nB\x98\xd3,\xc7\x00\x91Y\x84\x02\x95|\xc2\xe0R\x03Nu\xa2\x8dF\x7f\xb6\x94$\xf8;f\x00.,\x1et\x1cO\xe0\x1d\x82\x13?\xba\xee\x8anY\x9d\xd4$\x98\tR\xc0ZfaY\xabh\xec9\x93\xc6|6\x1d\x98\xd3Z\x1f\xc1\xe4\x04\xf1\xe5\xe5\x81a\xcd\xc7\xca\xad\xcaEV}C\xb3\x15\xf2M\xc3-\xc7\xa1\xce\x96F%\x91\xeb\xa8\x8d\xee8 \xe3\xf1\r{\xfb\xb1\x18\x99\xccb*\x84\xb4E\xe0zI\f\a7\xf8\x85\x82\xb8#\xf2\x18\x9b3R\xcfI\xa0)\x89J\x19', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800007, 0x4d091, r1, 0x0) preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) [ 215.185243][ T9787] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully deinitialized and disconnected. 00:44:25 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c24000010203010902"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0}) [ 215.349437][ T4898] usb 1-1: new high-speed USB device number 37 using dummy_hcd 00:44:25 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='S'], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 215.529251][ T9745] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 215.569574][ T9787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.589132][ T9574] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 215.600963][ T4898] usb 1-1: Using ep0 maxpacket: 32 [ 215.639453][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 215.759169][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 215.799188][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.810856][ T4898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.822995][ T4898] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 215.879261][ T9745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.900697][ T9745] usb 4-1: config 0 has no interfaces? [ 215.972282][ T9574] usb 3-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=11.63 [ 215.989740][ T9787] usb 5-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=11.63 [ 216.014205][ T9787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.019567][ T9574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.039242][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 216.044995][ T4898] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 216.058938][ T9787] usb 5-1: config 0 descriptor?? [ 216.064078][ T9745] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 216.067666][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.099973][ T9745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.126985][ T9574] usb 3-1: config 0 descriptor?? [ 216.144879][ T9787] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 216.150229][ T9745] usb 4-1: Product: syz [ 216.167395][ T9745] usb 4-1: Manufacturer: syz [ 216.180623][ T9745] usb 4-1: SerialNumber: syz [ 216.197822][ T4898] usb 1-1: Product: ࠄ [ 216.211137][ T9574] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 216.221919][ T9745] usb 4-1: config 0 descriptor?? [ 216.228888][ T4898] usb 1-1: Manufacturer: 䐮 [ 216.234995][ T5] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.254237][ T4898] usb 1-1: SerialNumber: Ь [ 216.320864][ T5] usb 2-1: config 0 has no interfaces? [ 216.489379][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 216.499214][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.507362][ T5] usb 2-1: Product: syz [ 216.516668][ T5] usb 2-1: Manufacturer: syz [ 216.522261][ T5] usb 2-1: SerialNumber: syz [ 216.540691][ T5] usb 2-1: config 0 descriptor?? [ 216.556906][ T3817] usb 4-1: USB disconnect, device number 54 [ 216.565800][ T4898] usb 1-1: USB disconnect, device number 37 [ 216.793897][ T7] usb 2-1: USB disconnect, device number 2 [ 216.854693][ T9787] gp8psk: usb in 137 operation failed. [ 216.863619][ T9787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.879136][ T9574] gp8psk: usb in 137 operation failed. [ 216.889550][ T9574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.909480][ T9787] dvbdev: DVB: registering new adapter (Genpix SkyWalker-2 DVB-S receiver) [ 216.922466][ T9787] usb 5-1: media controller created [ 216.923110][ T9574] dvbdev: DVB: registering new adapter (Genpix SkyWalker-2 DVB-S receiver) [ 216.948580][ T9574] usb 3-1: media controller created [ 216.951900][ T9787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.979668][ T9574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.992408][ T9787] gp8psk_fe: Frontend attached [ 216.997348][ T9787] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 217.014734][ T9574] gp8psk_fe: Frontend attached 00:44:27 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:27 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='S'], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 217.056983][ T9787] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. 00:44:27 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d0001014010090909"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 217.124667][ T9574] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 217.155730][ T9574] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 217.269302][ T9787] gp8psk: usb in 138 operation failed. [ 217.275143][ T9787] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully initialized and connected. [ 217.317348][ T9787] gp8psk: found Genpix USB device pID = 206 (hex) 00:44:27 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='S'], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 217.366242][ T9787] usb 5-1: USB disconnect, device number 4 [ 217.369365][ T9574] gp8psk: usb in 138 operation failed. [ 217.377848][ T9574] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully initialized and connected. 00:44:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xb9, 0xe4, 0x40, 0x9c0, 0x206, 0x1163, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x2c, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0xf, 0x50, "deef1208a8c363ba105d822ac90bb917ca5bdc235950ef0ce02d30b057ca880848e2e71a8f7e9f8e0d87e2e579fc88915530d75fff3e90fe28352e3453261507e2be6d5f568bb9ea6df7ce1aa76fb086"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xb4, "24973012d73a44bb48edebf43cb2182c16e4f999cb0fb5cdaf69fa62dc3e4cc498006b17001bc6e5e3b5b6a0e2003de397f962d1d3ca21ac313ef2efd10ec99dc21520bcb976d177de158c6f5184e747f9024fca44c7744ea4b79709624c2491db8f915f34fb00b80cda894c38197ff804260370cac381f4d4d7302806d23d949864403611d0350f25fbc74b8d9a02625a27b236c4e077ca9dd1f7082643351a2c2084d63d2c901e57c1a6f1448256f2334356b8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 217.424643][ T9574] gp8psk: found Genpix USB device pID = 206 (hex) 00:44:27 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) [ 217.472897][ T9574] usb 3-1: USB disconnect, device number 4 [ 217.518425][ T9787] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully deinitialized and disconnected. 00:44:27 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000900)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\x8a\xcc\xba\\\xceYF2C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84]\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8o\aArYZ\xe1\xc9\x86\xfe\x8f(\xa1\vhb\x18\xf3\xe3\xa1\xd2\x93*h\xd7\xa2F\x88\xd57\xb2\xc8\x8cS\xe8:H}\x91\x91\xcc\xa7Y\xcbkK\xf0\xfe\x9e\xd5\xa1\x1e\x99~\x9d3\xd2?\b\xbfU\xe8\x8b\x93\xea`\x00\x80\x00\x00V\xbf!\xb7\xe9\x11\r\xbd\xa3\xc6-t\x9c;\x9as\x86\xe7\xbd\xb0\xd5\";\xecuP\"\xebrV\x88\xca\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe8\xc6\xc3\nE\x91\xff\xd8E$\xc4As\x80\xdbt\x0e\xe21_v1\xd8,\xa4\x7fD\x94\xe8?\xf8\xcd[1\xb2U,\xc8w0|E\x00\x88IoQpH\xa0\xe8\xf0\x7f\xbd\xbcs;\xc9\xd2\x19oS\xac\xc6\x9b`:6\xc9DS\x13\xfb\xddw\nK\x19\xfa\x99\xc6~\x044\xa3+)\xef@Lr\xed\x85\xf3\xe8#\xa4\x84\xe9W8\xd6\x80\x95\xba.?+O\xbe[&\x87\xe1\xc5\xd7C\xa1\xde\xa4\b*w\xdc]\x92\xce\xe6BNFj;\xd7 \xfb\f\xeb\xb1\xb8\x86x\x19\xa0\xc4\xd3^W\xb7\x10\x18\xba\xcc\xabJ\xdfYB\"\x96\rny3\xe9\xec\xdf\xc4\xae\xfaM\xa2k\xd8X\xe6hQ\t\x93\xc1\xfd\xb7\xa4\x04W\xa0n\xff') r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000028000504d25a80648c63940d0124fc6004000f400a003d005a00000037153e370a00018003000000d1bd", 0x2e}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) [ 217.677345][ T9574] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully deinitialized and disconnected. [ 217.730289][ T9745] usb 1-1: new high-speed USB device number 38 using dummy_hcd 00:44:27 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x2b, 0x42, 0x2, 0x3e, 0x0, 0x200, 0x460c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40000, 0x100000001, 0x4, 0x9, 0x5, 0x4, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) [ 217.849098][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 217.858526][ T3817] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 217.876894][T11068] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 217.912493][T11068] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 217.944514][ C1] sd 0:0:1:0: [sg0] tag#5147 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 217.955675][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB: Test Unit Ready [ 217.962936][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.972724][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.982825][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.992917][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.003352][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.013142][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.022922][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.032782][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.042865][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.052545][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:44:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x400007f}, 0x0, 0x6, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ed74c92fad7004bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3"], 0x14f) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x14) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') [ 218.062306][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.072450][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.082303][ C1] sd 0:0:1:0: [sg0] tag#5147 CDB[c0]: 00 00 00 00 00 00 00 00 [ 218.097166][ T9745] usb 1-1: Using ep0 maxpacket: 32 [ 218.112451][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 218.117974][ T3817] usb 4-1: Using ep0 maxpacket: 32 00:44:28 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x2b, 0x42, 0x2, 0x3e, 0x0, 0x200, 0x460c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40000, 0x100000001, 0x4, 0x9, 0x5, 0x4, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) [ 218.267852][ T9574] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 218.279970][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.293437][ T3817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.299374][ T9745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.329395][ T9745] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 218.355003][ C1] sd 0:0:1:0: [sg0] tag#5148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 218.365635][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB: Test Unit Ready [ 218.372358][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.382280][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.391958][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.400201][ T7] usb 2-1: config 0 has no interfaces? [ 218.401605][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.407604][ T3817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.417202][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417235][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417259][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417282][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417310][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417338][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417364][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417389][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.417415][ C1] sd 0:0:1:0: [sg0] tag#5148 CDB[c0]: 00 00 00 00 00 00 00 00 00:44:28 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x2b, 0x42, 0x2, 0x3e, 0x0, 0x200, 0x460c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40000, 0x100000001, 0x4, 0x9, 0x5, 0x4, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) 00:44:28 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x2b, 0x42, 0x2, 0x3e, 0x0, 0x200, 0x460c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40000, 0x100000001, 0x4, 0x9, 0x5, 0x4, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) [ 218.639344][ T7] usb 2-1: string descriptor 0 read error: -71 [ 218.647303][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 218.659838][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.688589][ T7] usb 2-1: config 0 descriptor?? [ 218.709587][ T9745] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 218.719272][ T7] usb 2-1: can't set config #0, error -71 [ 218.729278][ T7] usb 2-1: USB disconnect, device number 3 [ 218.729590][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.736364][ T3817] usb 4-1: config 0 has no interfaces? [ 218.767634][ T9745] usb 1-1: Product: ࠄ [ 218.767664][ T9745] usb 1-1: Manufacturer: 䐮 [ 218.767683][ T9745] usb 1-1: SerialNumber: Ь [ 218.839601][ T9574] usb 3-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=11.63 [ 218.865884][ T9574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.896441][ C0] sd 0:0:1:0: [sg0] tag#5149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 218.897476][ T9574] usb 3-1: config 0 descriptor?? [ 218.906923][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB: Test Unit Ready [ 218.906954][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.906980][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907008][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907033][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907058][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907085][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907126][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907155][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907179][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907205][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907232][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907260][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.907287][ C0] sd 0:0:1:0: [sg0] tag#5149 CDB[c0]: 00 00 00 00 00 00 00 00 [ 218.970515][ T3817] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 218.987882][ C1] sd 0:0:1:0: [sg0] tag#5150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 219.022856][ T3817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.029410][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB: Test Unit Ready [ 219.069786][ T3817] usb 4-1: Product: syz [ 219.075503][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.075537][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.106338][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.114324][ T3817] usb 4-1: Manufacturer: syz [ 219.116382][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.135948][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.144507][ T3817] usb 4-1: SerialNumber: syz [ 219.146076][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.160964][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.164034][ T3817] usb 4-1: config 0 descriptor?? [ 219.171365][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.171398][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.171423][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.171447][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.171472][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.227104][ C1] sd 0:0:1:0: [sg0] tag#5150 CDB[c0]: 00 00 00 00 00 00 00 00 [ 219.423946][ T9745] usb 1-1: USB disconnect, device number 38 [ 219.432486][ T9574] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 219.466859][ T9746] usb 4-1: USB disconnect, device number 55 00:44:30 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x2b, 0x42, 0x2, 0x3e, 0x0, 0x200, 0x460c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40000, 0x100000001, 0x4, 0x9, 0x5, 0x4, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) 00:44:30 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c24000010203010902"], &(0x7f0000000300)={0x0, 0x0, 0xef, 0x0}) 00:44:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc020662a, &(0x7f0000000080)) 00:44:30 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d0001014010090909"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 220.078993][ T9574] gp8psk: usb in 137 operation failed. [ 220.084633][ T9574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.150817][ C1] sd 0:0:1:0: [sg0] tag#5155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 220.162025][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB: Test Unit Ready [ 220.169870][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.179844][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.189915][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.200070][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.209845][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.219733][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.229506][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.239503][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.249293][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.259547][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.269241][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.279014][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.289218][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[c0]: 00 00 00 00 00 00 00 00 [ 220.325445][ T9574] dvbdev: DVB: registering new adapter (Genpix SkyWalker-2 DVB-S receiver) [ 220.363216][ T9574] usb 3-1: media controller created [ 220.389944][ T9574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.415466][ T9574] gp8psk_fe: Frontend attached [ 220.429320][ T9574] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 220.438176][ T9574] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 220.450500][ T3817] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 220.559041][ T9574] gp8psk: usb in 138 operation failed. [ 220.573399][ T9574] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully initialized and connected. [ 220.587181][ T9574] gp8psk: found Genpix USB device pID = 206 (hex) [ 220.611384][ T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 220.647591][ T9574] usb 3-1: USB disconnect, device number 5 00:44:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xb9, 0xe4, 0x40, 0x9c0, 0x206, 0x1163, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x2c, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0xf, 0x50, "deef1208a8c363ba105d822ac90bb917ca5bdc235950ef0ce02d30b057ca880848e2e71a8f7e9f8e0d87e2e579fc88915530d75fff3e90fe28352e3453261507e2be6d5f568bb9ea6df7ce1aa76fb086"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xb4, "24973012d73a44bb48edebf43cb2182c16e4f999cb0fb5cdaf69fa62dc3e4cc498006b17001bc6e5e3b5b6a0e2003de397f962d1d3ca21ac313ef2efd10ec99dc21520bcb976d177de158c6f5184e747f9024fca44c7744ea4b79709624c2491db8f915f34fb00b80cda894c38197ff804260370cac381f4d4d7302806d23d949864403611d0350f25fbc74b8d9a02625a27b236c4e077ca9dd1f7082643351a2c2084d63d2c901e57c1a6f1448256f2334356b8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 00:44:30 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 00:44:30 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) [ 220.689095][ T3817] usb 1-1: Using ep0 maxpacket: 32 [ 220.859195][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 220.872493][ T9574] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully deinitialized and disconnected. [ 220.872704][ C0] sd 0:0:1:0: [sg0] tag#5156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 220.893133][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB: Test Unit Ready [ 220.899827][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.914639][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.925365][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.935434][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.945611][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.955481][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.965692][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.975686][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.985512][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.995315][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.005145][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.015622][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.019909][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.025543][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[c0]: 00 00 00 00 00 00 00 00 [ 221.159873][ T36] usb 2-1: config 0 has no interfaces? 00:44:30 executing program 4: syz_mount_image$romfs(&(0x7f0000000040)='romfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b', 0x1, 0x8}], 0x1080, &(0x7f00000001c0)={[], [{@uid_gt={'uid>', 0xee00}}]}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 00:44:31 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() [ 221.242630][ T3817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.250395][ T9745] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 221.267831][ T3817] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 221.320941][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 221.342505][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.376596][ C1] sd 0:0:1:0: [sg0] tag#5157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 221.387935][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB: Test Unit Ready [ 221.394763][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.404650][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.414506][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.424180][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.433959][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.443885][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.454182][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.464420][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.469240][ T3817] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 221.474432][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.495109][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.495922][ T3817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.504961][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.504997][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.505023][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[c0]: 00 00 00 00 00 00 00 00 [ 221.512676][ T36] usb 2-1: Product: syz [ 221.542005][ T3817] usb 1-1: Product: ࠄ [ 221.592488][ T36] usb 2-1: Manufacturer: syz [ 221.593666][ T3817] usb 1-1: Manufacturer: 䐮 [ 221.597936][ T36] usb 2-1: SerialNumber: syz [ 221.605798][ T36] usb 2-1: config 0 descriptor?? 00:44:31 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 221.665360][ T3817] usb 1-1: SerialNumber: Ь [ 221.725028][ T9574] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 221.743411][ C1] sd 0:0:1:0: [sg0] tag#5158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 221.754987][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB: Test Unit Ready [ 221.761542][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.771393][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.782044][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.792503][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.803246][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.813048][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.822862][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.832628][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.842676][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.853849][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.863789][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.874046][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.884701][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[c0]: 00 00 00 00 00 00 00 00 [ 221.949218][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 221.963217][ T3817] usb 1-1: USB disconnect, device number 39 00:44:32 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 00:44:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) [ 222.095759][ T9746] usb 2-1: USB disconnect, device number 4 [ 222.109291][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.175130][ C0] sd 0:0:1:0: [sg0] tag#5159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 222.185879][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB: Test Unit Ready [ 222.192525][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.202360][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.212301][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.213333][ T9745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.222096][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.222131][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.222156][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.222184][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.233945][ T9574] usb 3-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=11.63 [ 222.243035][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.243068][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.243095][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:44:32 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) [ 222.243120][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.243144][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.243172][ C0] sd 0:0:1:0: [sg0] tag#5159 CDB[c0]: 00 00 00 00 00 00 00 00 [ 222.296630][ T9745] usb 4-1: config 0 has no interfaces? [ 222.366801][ T9574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.411878][ T9574] usb 3-1: config 0 descriptor?? [ 222.471592][ T9574] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 222.545577][ C1] sd 0:0:1:0: [sg0] tag#5160 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 222.556404][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB: Test Unit Ready [ 222.563086][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.573032][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.583414][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.593203][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.603064][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.612793][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.622955][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.633030][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.643310][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.653353][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.663454][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.673420][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.683377][ C1] sd 0:0:1:0: [sg0] tag#5160 CDB[c0]: 00 00 00 00 00 00 00 00 00:44:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x5}, 0x40) 00:44:32 executing program 4: ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000c40)='./file0\x00', 0x0, 0x1) 00:44:32 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 222.799180][ T9745] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 222.819061][ T9745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.845933][ T9745] usb 4-1: Product: syz [ 222.861294][ T9745] usb 4-1: Manufacturer: syz [ 222.887154][ T9745] usb 4-1: SerialNumber: syz [ 222.914852][ T9745] usb 4-1: config 0 descriptor?? [ 223.098879][ T3817] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 223.139046][ T9574] gp8psk: usb in 137 operation failed. [ 223.144921][ T9574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.177282][ T9746] usb 4-1: USB disconnect, device number 56 [ 223.187403][ T9574] dvbdev: DVB: registering new adapter (Genpix SkyWalker-2 DVB-S receiver) [ 223.212595][ T9574] usb 3-1: media controller created [ 223.251543][ T9574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.301995][ T9574] gp8psk_fe: Frontend attached [ 223.318512][ T9574] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 223.338749][ T3817] usb 1-1: Using ep0 maxpacket: 32 [ 223.357180][ T9574] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 223.548864][ T9574] gp8psk: usb in 138 operation failed. [ 223.549068][ T3817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.557127][ T9574] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully initialized and connected. [ 223.585666][ T9574] gp8psk: found Genpix USB device pID = 206 (hex) [ 223.594525][ T3817] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 223.601973][ T9574] usb 3-1: USB disconnect, device number 6 [ 223.686745][ T9574] dvb-usb: Genpix SkyWalker-2 DVB-S receiver successfully deinitialized and disconnected. 00:44:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f80)='cmdline\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:44:33 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xbd, @private1, 0x6360}, {0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x742}, 0x7, [0xcb08e1f7, 0x5, 0x0, 0x86, 0xcec, 0x1000, 0xec36, 0x1298]}, 0x5c) 00:44:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r0, 0x540b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "ed5f894f569c94e5c2ea21b62e3f90caa84ca0"}) 00:44:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$nl_route(0x10, 0x3, 0x0) 00:44:33 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) [ 223.779224][ T3817] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 223.793614][ T3817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.825862][ C1] sd 0:0:1:0: [sg0] tag#5161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.836794][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB: Test Unit Ready [ 223.837725][ T3817] usb 1-1: Product: ࠄ [ 223.843567][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.843599][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.843625][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.843649][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.843674][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.843703][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.843727][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.879752][ T3817] usb 1-1: Manufacturer: 䐮 00:44:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 223.889489][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.889520][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.889545][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.889569][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.889593][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.889619][ C1] sd 0:0:1:0: [sg0] tag#5161 CDB[c0]: 00 00 00 00 00 00 00 00 00:44:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0), 0xc) [ 224.127024][ C0] sd 0:0:1:0: [sg0] tag#5162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.128292][ T37] audit: type=1326 audit(1615682674.189:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x7ffc0000 [ 224.137872][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB: Test Unit Ready [ 224.137906][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.137934][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.137960][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.137987][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138014][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:44:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) [ 224.138043][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138070][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138096][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138123][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:44:34 executing program 2: openat$vcsa(0xffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 224.138151][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138178][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138202][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.138227][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[c0]: 00 00 00 00 00 00 00 00 [ 224.207241][ T3817] usb 1-1: SerialNumber: Ь 00:44:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)) [ 224.359260][ T9746] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 224.460420][ C0] sd 0:0:1:0: [sg0] tag#5163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.473129][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB: Test Unit Ready [ 224.480227][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.490844][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:44:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1, &(0x7f00000008c0)=@raw=[@jmp], &(0x7f0000000900)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 224.501374][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.511991][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512022][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512050][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512078][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512105][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512135][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512163][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512198][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512226][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.512253][ C0] sd 0:0:1:0: [sg0] tag#5163 CDB[c0]: 00 00 00 00 00 00 00 00 [ 224.562404][ T37] audit: type=1326 audit(1615682674.379:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x7ffc0000 [ 224.562473][ T37] audit: type=1326 audit(1615682674.379:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x7ffc0000 [ 224.598743][ T9746] usb 4-1: Using ep0 maxpacket: 32 [ 224.666976][ T3817] usb 1-1: USB disconnect, device number 40 [ 224.839287][ T9746] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.939070][ T9746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.957658][ T9746] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:44:35 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:35 executing program 2: bpf$MAP_CREATE(0x8, &(0x7f00000004c0), 0x40) 00:44:35 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x6, 0x201}, 0x14}}, 0x0) 00:44:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@session={'session'}}, {@check_relaxed='check=relaxed'}]}) [ 225.136097][ T9746] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 225.153738][ T9746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.179512][ T9746] usb 4-1: Product: syz [ 225.220236][ T9746] usb 4-1: Manufacturer: syz [ 225.236674][ T9746] usb 4-1: SerialNumber: syz [ 225.338695][T11297] ISOFS: Unable to identify CD-ROM format. [ 225.478090][T11297] ISOFS: Unable to identify CD-ROM format. [ 225.516433][ T9574] usb 4-1: USB disconnect, device number 57 [ 225.648736][ T9571] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 225.908776][ T9571] usb 1-1: Using ep0 maxpacket: 32 00:44:36 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d0001"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:36 executing program 2: syz_io_uring_setup(0x3245, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:44:36 executing program 1: syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)) 00:44:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 226.108821][ T9571] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.130158][ T9571] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:44:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0x3}, 0x4) 00:44:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) [ 226.199418][T11331] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 226.212113][T11331] VFS: Can't find a romfs filesystem on dev loop1. [ 226.212113][T11331] [ 226.270604][T11331] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 226.284377][T11331] VFS: Can't find a romfs filesystem on dev loop1. [ 226.284377][T11331] [ 226.347322][ T9571] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 226.363162][ T9571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.393504][ T9571] usb 1-1: Product: ࠄ [ 226.415235][ T9571] usb 1-1: Manufacturer: 䐮 [ 226.436152][ T9571] usb 1-1: SerialNumber: Ь [ 226.508692][ T9574] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 226.760696][ T9571] usb 1-1: USB disconnect, device number 41 [ 226.768821][ T9574] usb 4-1: Using ep0 maxpacket: 32 [ 226.929149][ T9574] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.018642][ T9574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.037475][ T9574] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 00:44:37 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) syncfs(r0) 00:44:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x801012f0, 0xffffffffffffffff) 00:44:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0189436, &(0x7f0000000240)={'team0\x00'}) 00:44:37 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) [ 227.198775][ T9574] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 227.208303][ T9574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.218354][ T9574] usb 4-1: Product: syz [ 227.224800][ T9574] usb 4-1: Manufacturer: syz [ 227.238590][ T9574] usb 4-1: SerialNumber: syz [ 227.276165][ T9574] usb 4-1: config 0 descriptor?? [ 227.331137][ C0] sd 0:0:1:0: [sg0] tag#5178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 227.342049][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB: Test Unit Ready [ 227.348597][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.358290][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.368358][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.378297][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.388600][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.399001][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.409102][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.419074][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.429282][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.439967][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.449923][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.459883][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.469921][ C0] sd 0:0:1:0: [sg0] tag#5178 CDB[c0]: 00 00 00 00 00 00 00 00 [ 227.578644][ T7] usb 4-1: USB disconnect, device number 58 [ 227.789077][ T9787] usb 1-1: new high-speed USB device number 42 using dummy_hcd 00:44:38 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d00"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) 00:44:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1}, 0x40) 00:44:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x19}, 0x40) 00:44:38 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) [ 228.038711][ T9787] usb 1-1: Using ep0 maxpacket: 32 00:44:38 executing program 2: socket(0xa, 0x0, 0x1000) 00:44:38 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80) 00:44:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000011c0)='/dev/loop#\x00', 0x0, 0xc2800) ioctl$LOOP_SET_DIRECT_IO(r0, 0x8004700d, 0x0) 00:44:38 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) [ 228.249212][ T9787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.275690][ T9787] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.459122][ T9787] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 228.490973][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.509333][ T9745] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 228.526647][ T9787] usb 1-1: Product: ࠄ [ 228.537426][ T9787] usb 1-1: Manufacturer: 䐮 [ 228.547048][ T9787] usb 1-1: SerialNumber: Ь [ 228.758676][ T9745] usb 4-1: Using ep0 maxpacket: 32 [ 228.831942][ T9787] usb 1-1: USB disconnect, device number 42 [ 228.919069][ T9745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.998967][ T9745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.018459][ T9745] usb 4-1: config 0 has no interfaces? [ 229.178751][ T9745] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 229.188842][ T9745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.196878][ T9745] usb 4-1: Product: syz [ 229.203070][ T9745] usb 4-1: Manufacturer: syz [ 229.209068][ T9745] usb 4-1: SerialNumber: syz [ 229.219487][ T9745] usb 4-1: config 0 descriptor?? 00:44:39 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c0905"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:39 executing program 4: mq_open(&(0x7f0000000200)='%[\x00', 0x40, 0x0, &(0x7f0000000240)={0x20, 0x1c22b6e3, 0xffffff7f}) [ 229.463248][ T9746] usb 4-1: USB disconnect, device number 59 [ 229.678636][ T9787] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 229.939391][ T9787] usb 1-1: Using ep0 maxpacket: 32 00:44:40 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:40 executing program 2: openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2001, 0x0) 00:44:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x180800) 00:44:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000240)={'team0\x00'}) 00:44:40 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000001180)='/dev/nvram\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8008743f, 0x0) 00:44:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000240)={'team0\x00'}) 00:44:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "8f41d2ba27d5595d", "043cb4f56d0c786320c4d58429081621", "2d174820", "085401fa537fcb87"}, 0x28) [ 230.148667][ T9787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.162458][ T9787] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:44:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) [ 230.359005][ T9787] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 230.375967][ T9571] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 230.405313][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.419717][ T9787] usb 1-1: Product: ࠄ [ 230.424235][ T9787] usb 1-1: Manufacturer: 䐮 [ 230.430531][ T9787] usb 1-1: SerialNumber: Ь [ 230.658761][ T9571] usb 4-1: Using ep0 maxpacket: 32 [ 230.710926][ T9787] usb 1-1: USB disconnect, device number 43 [ 230.831994][ T9571] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.949392][ T9571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.960353][ T9571] usb 4-1: config 0 has no interfaces? [ 231.138672][ T9571] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 231.147962][ T9571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.157151][ T9571] usb 4-1: Product: syz [ 231.162004][ T9571] usb 4-1: Manufacturer: syz [ 231.166819][ T9571] usb 4-1: SerialNumber: syz [ 231.175624][ T9571] usb 4-1: config 0 descriptor?? 00:44:41 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000180)) [ 231.432478][ T9787] usb 4-1: USB disconnect, device number 60 [ 231.548464][ T9745] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 231.788449][ T9745] usb 1-1: Using ep0 maxpacket: 32 00:44:42 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c24000010203010902"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000240)={'team0\x00'}) 00:44:42 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "108f99eca7ffa513c55a33fd46a2a56f09b4bf"}) 00:44:42 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 232.028555][ T9745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.061118][ T9745] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:44:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000240)={'team0\x00'}) 00:44:42 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc) 00:44:42 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "108f99eca7ffa513c55a33fd46a2a56f09b4bf"}) 00:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) [ 232.268959][ T9745] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 232.299157][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.347863][ T9745] usb 1-1: Product: ࠄ [ 232.378355][ T3817] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 232.381974][ T9745] usb 1-1: Manufacturer: 䐮 [ 232.409886][ T9745] usb 1-1: SerialNumber: Ь [ 232.628491][ T3817] usb 4-1: Using ep0 maxpacket: 32 [ 232.710596][ T9745] usb 1-1: USB disconnect, device number 44 [ 232.788823][ T3817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.871048][ T3817] usb 4-1: config 0 has no interfaces? [ 233.038512][ T3817] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 233.047998][ T3817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.056737][ T3817] usb 4-1: Product: syz [ 233.061435][ T3817] usb 4-1: Manufacturer: syz [ 233.066171][ T3817] usb 4-1: SerialNumber: syz [ 233.076712][ T3817] usb 4-1: config 0 descriptor?? 00:44:43 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r0, 0x402c542b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "ed5f894f569c94e5c2ea21b62e3f90caa84ca0"}) [ 233.323424][ T9574] usb 4-1: USB disconnect, device number 61 [ 233.558740][ T9745] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 233.808378][ T9745] usb 1-1: Using ep0 maxpacket: 32 00:44:43 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:43 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "108f99eca7ffa513c55a33fd46a2a56f09b4bf"}) 00:44:43 executing program 4: socket(0x25, 0x3, 0x0) 00:44:43 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db98200000"], 0xab) 00:44:43 executing program 2: syz_io_uring_setup(0x1280, &(0x7f0000000440), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x942, &(0x7f0000000540), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 00:44:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xab) 00:44:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r0, 0x5407, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "ed5f894f569c94e5c2ea21b62e3f90caa84ca0"}) 00:44:44 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "108f99eca7ffa513c55a33fd46a2a56f09b4bf"}) 00:44:44 executing program 2: r0 = getpgrp(0xffffffffffffffff) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) [ 234.028614][ T9745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.056845][ T9745] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:44:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xab) [ 234.228459][ T9787] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 234.258523][ T9745] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 234.303657][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.350376][ T9745] usb 1-1: Product: ࠄ [ 234.363791][ T9745] usb 1-1: Manufacturer: 䐮 [ 234.370128][ T9745] usb 1-1: SerialNumber: Ь [ 234.468539][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 234.628443][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.670368][ T9745] usb 1-1: USB disconnect, device number 45 [ 234.748656][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 234.763231][ T9787] usb 4-1: can't read configurations, error -61 [ 234.918354][ T9787] usb 4-1: new high-speed USB device number 63 using dummy_hcd 00:44:45 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:45 executing program 4: syz_io_uring_setup(0x2aae, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 235.170649][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 235.338695][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.478736][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 235.486638][ T9787] usb 4-1: can't read configurations, error -61 [ 235.496088][ T9787] usb usb4-port1: attempt power cycle [ 235.498282][ T9745] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 235.748384][ T9745] usb 1-1: Using ep0 maxpacket: 32 [ 235.948506][ T9745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.959211][ T9745] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 236.128445][ T9745] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 236.137744][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.147659][ T9745] usb 1-1: Product: ࠄ [ 236.153219][ T9745] usb 1-1: Manufacturer: 䐮 [ 236.158067][ T9745] usb 1-1: SerialNumber: Ь [ 236.228333][ T9787] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 236.328343][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 236.450661][ T9745] usb 1-1: USB disconnect, device number 46 [ 236.518401][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.668428][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 236.676782][ T9787] usb 4-1: can't read configurations, error -61 [ 236.839314][ T9787] usb 4-1: new high-speed USB device number 65 using dummy_hcd 00:44:47 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f80)='cmdline\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:44:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000b80)) 00:44:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xab) 00:44:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2b) 00:44:47 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c09"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="050fef0001ea1004dacb862ba262730e468cbcaaca7546e166443dcc7d61e8b7b88279989706938e19f02cf95b6b92422bebfbacf33e4337db97314c345b559964f99a8bdab56f644e3bd76ae10ff1cbe02e00cc0a5614d8685ebebc8393fe45e9b7cb9eff469145578ea1bcf02e2221de2dd40ca58645b4a1c113057160b6d7bb75b055452d6fa975096ed29bc8b71e1316e9a1ae5a84e550d5a1c5a7a2fb694ae0b0cf926e122a41e4107fbd04dbbc2da2cc2fbaec3d6459651ed5eaf7426a76f9c2c40d8ce97a7d49d4521485bc72a682c6bb302be5a3996fcb79a5bb890fbd7e5a9d4c32d4bd5a5f1815229218fde5943b137f2149db741c7678b7925ac04ebfe1a15ea9a21c242831d7fe61cfad1c69ea2aff23fb81d569e40571993c00eadddb999e559ccf07c6f6883b40b3b70d559873a61846fb51947cc076ef828604e28eb97af28f2631bf226386d692c39c68222fb4d0c4b83bae5b75ce1812f9f4e9217272b562d7cc001dc95fa564904628ae2b9d499c7432d11a8f544cec7d429e7ae979abec253fd0eda16d2cea677f96619945a49c"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 237.018639][ T9787] usb 4-1: device descriptor read/8, error -71 00:44:47 executing program 4: syz_mount_image$romfs(&(0x7f0000000040)='romfs\x00', 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 00:44:47 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005140)) 00:44:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0xab) [ 237.140398][ T9787] usb usb4-port1: unable to enumerate USB device 00:44:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x3, 0x0, 0x200, 0x0, 0x1}, 0x40) 00:44:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0xab) 00:44:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0xab) [ 237.368276][ T9745] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 237.528454][ T9787] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 237.620347][ T9745] usb 1-1: Using ep0 maxpacket: 32 [ 237.778302][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 237.818770][ T9745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.836111][ T9745] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 237.948676][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.018593][ T9745] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 238.031076][ T9745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.043433][ T9745] usb 1-1: Product: ࠄ [ 238.052347][ T9745] usb 1-1: Manufacturer: 䐮 [ 238.057430][ T9745] usb 1-1: SerialNumber: Ь [ 238.088348][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 238.096001][ T9787] usb 4-1: can't read configurations, error -61 [ 238.258474][ T9787] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 238.349842][ T9745] usb 1-1: USB disconnect, device number 47 [ 238.518244][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 238.738669][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.898549][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 238.906587][ T9787] usb 4-1: can't read configurations, error -61 [ 238.915544][ T9787] usb usb4-port1: attempt power cycle [ 239.648154][ T9787] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 239.758630][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 239.948930][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short 00:44:50 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:44:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xab) 00:44:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:50 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000001180)='/dev/nvram\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 00:44:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r0, 0x541a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "ed5f894f569c94e5c2ea21b62e3f90caa84ca0"}) 00:44:50 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) [ 240.088096][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 240.095755][ T9787] usb 4-1: can't read configurations, error -71 00:44:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100), 0x10) 00:44:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x0, 0x7, 0x200, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 00:44:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xab) 00:44:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x807812f0, 0xffffffffffffffff) [ 240.488149][ T7] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 240.610316][ T9787] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 240.730553][ T9787] usb 4-1: Using ep0 maxpacket: 32 [ 240.765067][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 240.928557][ T9787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.008577][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.019145][ T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 241.068334][ T9787] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.076225][ T9787] usb 4-1: can't read configurations, error -61 [ 241.084531][ T9787] usb usb4-port1: unable to enumerate USB device [ 241.229170][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 241.238570][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.247680][ T7] usb 1-1: Product: ࠄ [ 241.253737][ T7] usb 1-1: Manufacturer: 䐮 [ 241.259845][ T7] usb 1-1: SerialNumber: Ь [ 241.530399][ T7] usb 1-1: USB disconnect, device number 48 00:44:53 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c24000010203010902"], 0x0) 00:44:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xab) 00:44:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x401}, 0x14}}, 0x0) 00:44:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:53 executing program 4: mq_open(&(0x7f0000000000)='+#--W[\x7f,{\'@&+\x00', 0x0, 0x0, 0x0) 00:44:53 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d3"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x5c, 0x8, 0x0, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]}) 00:44:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002d00)=@raw={'raw\x00', 0x9, 0x3, 0x294, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @mcast2, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'veth1_macvtap\x00', {0xff}, {}, 0xff, 0x1, 0x0, 0x55}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@ipv6header={{0x24, 'ipv6header\x00'}, {0x2, 0x1, 0x1}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f0) 00:44:53 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f00000004c0), 0x40) 00:44:53 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206d0415c240000102030109022d000101401009090921002bc70122d30c090581030004088006090502"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x5, 0x5c, 0x0, 0x60, 0x3}, 0xef, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x442e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000d80)={0x0}) 00:44:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000"], 0xab) [ 243.513976][T11724] ================================================================== [ 243.522893][T11724] BUG: KASAN: double-free or invalid-free in kfree+0xe5/0x7f0 [ 243.530836][T11724] [ 243.533274][T11724] CPU: 1 PID: 11724 Comm: syz-executor.5 Not tainted 5.12.0-rc2-next-20210312-syzkaller #0 [ 243.543496][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.553841][T11724] Call Trace: [ 243.557406][T11724] dump_stack+0x141/0x1d7 [ 243.561849][T11724] ? kfree+0xe5/0x7f0 [ 243.565860][T11724] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 243.573054][T11724] ? kfree+0xe5/0x7f0 [ 243.577288][T11724] ? kfree+0xe5/0x7f0 [ 243.581390][T11724] kasan_report_invalid_free+0x51/0x80 [ 243.586883][T11724] __kasan_slab_free+0x118/0x130 [ 243.591855][T11724] slab_free_freelist_hook+0x92/0x210 [ 243.597342][T11724] kfree+0xe5/0x7f0 [ 243.601189][T11724] ? sg_finish_scsi_blk_rq+0x690/0x810 [ 243.607266][T11724] sg_finish_scsi_blk_rq+0x690/0x810 [ 243.612612][T11724] ? sg_execute_cmd+0x830/0x830 [ 243.617593][T11724] ? find_held_lock+0x2d/0x110 [ 243.622481][T11724] ? __might_fault+0xd3/0x180 [ 243.627626][T11724] ? lock_downgrade+0x6e0/0x6e0 [ 243.638528][T11724] sg_common_write+0xa07/0xe70 [ 243.643440][T11724] ? sg_start_req+0x24e0/0x24e0 [ 243.648335][T11724] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 243.654859][T11724] ? _copy_from_user+0x5d/0x180 [ 243.659926][T11724] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 243.666557][T11724] ? get_sg_io_hdr+0x15d/0x8d0 [ 243.671659][T11724] sg_v3_submit+0x3b1/0x530 [ 243.676730][T11724] ? sg_common_write+0xe70/0xe70 [ 243.681720][T11724] sg_write.part.0+0xaf8/0xec0 [ 243.686630][T11724] ? sg_v3_submit+0x530/0x530 [ 243.691545][T11724] ? __fget_files+0x266/0x3d0 [ 243.696455][T11724] ? lock_downgrade+0x6e0/0x6e0 [ 243.701348][T11724] ? apparmor_file_permission+0x26e/0x4e0 [ 243.707216][T11724] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 243.713666][T11724] ? security_file_permission+0x248/0x560 [ 243.719514][T11724] sg_write+0x87/0x120 [ 243.723701][T11724] ? sg_write.part.0+0xec0/0xec0 [ 243.728673][T11724] vfs_write+0x28e/0xa30 [ 243.733358][T11724] ksys_write+0x12d/0x250 [ 243.738246][T11724] ? __ia32_sys_read+0xb0/0xb0 [ 243.743447][T11724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 243.749461][T11724] do_syscall_64+0x2d/0x70 [ 243.754122][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.760204][T11724] RIP: 0033:0x465f69 [ 243.764135][T11724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 243.784220][T11724] RSP: 002b:00007f302b565188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.792665][T11724] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 243.800662][T11724] RDX: 00000000000000ab RSI: 0000000020000540 RDI: 0000000000000003 [ 243.808658][T11724] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 243.817103][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 243.825202][T11724] R13: 00007ffd5a23815f R14: 00007f302b565300 R15: 0000000000022000 [ 243.833263][T11724] [ 243.835599][T11724] Allocated by task 11724: [ 243.840032][T11724] kasan_save_stack+0x1b/0x40 [ 243.844841][T11724] __kasan_kmalloc+0x99/0xc0 [ 243.849503][T11724] sg_start_req+0x16f/0x24e0 [ 243.854612][T11724] sg_common_write+0x5fd/0xe70 [ 243.859669][T11724] sg_v3_submit+0x3b1/0x530 [ 243.864687][T11724] sg_write.part.0+0xaf8/0xec0 [ 243.869664][T11724] sg_write+0x87/0x120 [ 243.873759][T11724] vfs_write+0x28e/0xa30 [ 243.878127][T11724] ksys_write+0x12d/0x250 [ 243.882482][T11724] do_syscall_64+0x2d/0x70 [ 243.886923][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.892845][T11724] [ 243.895181][T11724] Freed by task 11724: [ 243.899286][T11724] kasan_save_stack+0x1b/0x40 [ 243.903982][T11724] kasan_set_track+0x1c/0x30 [ 243.908591][T11724] kasan_set_free_info+0x20/0x30 [ 243.913725][T11724] __kasan_slab_free+0xf5/0x130 [ 243.918630][T11724] slab_free_freelist_hook+0x92/0x210 [ 243.924225][T11724] kfree+0xe5/0x7f0 [ 243.928754][T11724] sg_start_req+0x1b33/0x24e0 [ 243.933462][T11724] sg_common_write+0x5fd/0xe70 [ 243.938338][T11724] sg_v3_submit+0x3b1/0x530 [ 243.942871][T11724] sg_write.part.0+0xaf8/0xec0 [ 243.947664][T11724] sg_write+0x87/0x120 [ 243.951936][T11724] vfs_write+0x28e/0xa30 [ 243.956292][T11724] ksys_write+0x12d/0x250 [ 243.960857][T11724] do_syscall_64+0x2d/0x70 [ 243.965322][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.971458][T11724] [ 243.973835][T11724] Last potentially related work creation: [ 243.979760][T11724] kasan_save_stack+0x1b/0x40 [ 243.984465][T11724] kasan_record_aux_stack+0xe5/0x110 [ 243.990306][T11724] call_rcu+0xb1/0x750 [ 243.994510][T11724] addrconf_notify+0x1cdc/0x23e0 [ 243.999610][T11724] notifier_call_chain+0xb5/0x200 [ 244.004802][T11724] call_netdevice_notifiers_info+0xb5/0x130 [ 244.010828][T11724] __dev_notify_flags+0x110/0x2b0 [ 244.016031][T11724] dev_change_flags+0x112/0x170 [ 244.021004][T11724] do_setlink+0x89a/0x3a70 [ 244.025455][T11724] __rtnl_newlink+0xdc6/0x1710 [ 244.030335][T11724] rtnl_newlink+0x64/0xa0 [ 244.034708][T11724] rtnetlink_rcv_msg+0x44e/0xad0 [ 244.039847][T11724] netlink_rcv_skb+0x153/0x420 [ 244.044845][T11724] netlink_unicast+0x533/0x7d0 [ 244.049670][T11724] netlink_sendmsg+0x856/0xd90 [ 244.054468][T11724] sock_sendmsg+0xcf/0x120 [ 244.058969][T11724] __sys_sendto+0x21c/0x320 00:44:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000065c0)='./file0\x00', 0xee01, 0xffffffffffffffff) [ 244.063505][T11724] __x64_sys_sendto+0xdd/0x1b0 [ 244.068376][T11724] do_syscall_64+0x2d/0x70 [ 244.073245][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 244.079348][T11724] [ 244.081680][T11724] The buggy address belongs to the object at ffff88802871f400 [ 244.081680][T11724] which belongs to the cache kmalloc-256 of size 256 [ 244.095839][T11724] The buggy address is located 0 bytes inside of [ 244.095839][T11724] 256-byte region [ffff88802871f400, ffff88802871f500) [ 244.109153][T11724] The buggy address belongs to the page: 00:44:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x0, 0x0) [ 244.115175][T11724] page:ffffea0000a1c780 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802871fa00 pfn:0x2871e [ 244.127182][T11724] head:ffffea0000a1c780 order:1 compound_mapcount:0 [ 244.134062][T11724] flags: 0xfff00000010200(slab|head) [ 244.139383][T11724] raw: 00fff00000010200 ffffea000060f400 0000000400000004 ffff888010841b40 [ 244.148090][T11724] raw: ffff88802871fa00 000000008010000c 00000001ffffffff 0000000000000000 [ 244.156689][T11724] page dumped because: kasan: bad access detected [ 244.163202][T11724] [ 244.165553][T11724] Memory state around the buggy address: [ 244.171198][T11724] ffff88802871f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.179365][T11724] ffff88802871f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.190313][T11724] >ffff88802871f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.198478][T11724] ^ [ 244.202670][T11724] ffff88802871f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.210795][T11724] ffff88802871f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.218960][T11724] ================================================================== [ 244.227226][T11724] Disabling lock debugging due to kernel taint [ 244.246694][ T3658] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 244.275550][T11724] Kernel panic - not syncing: panic_on_warn set ... [ 244.282325][T11724] CPU: 1 PID: 11724 Comm: syz-executor.5 Tainted: G B 5.12.0-rc2-next-20210312-syzkaller #0 [ 244.293722][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.304224][T11724] Call Trace: [ 244.307525][T11724] dump_stack+0x141/0x1d7 [ 244.311900][T11724] panic+0x306/0x73d [ 244.315891][T11724] ? __warn_printk+0xf3/0xf3 [ 244.320617][T11724] ? preempt_schedule_common+0x59/0xc0 [ 244.326120][T11724] ? kfree+0xe5/0x7f0 [ 244.330223][T11724] ? kfree+0xe5/0x7f0 [ 244.334224][T11724] ? preempt_schedule_thunk+0x16/0x18 [ 244.339721][T11724] ? trace_hardirqs_on+0x38/0x1c0 [ 244.344859][T11724] ? trace_hardirqs_on+0x51/0x1c0 [ 244.350154][T11724] ? kfree+0xe5/0x7f0 [ 244.354172][T11724] ? kfree+0xe5/0x7f0 [ 244.358221][T11724] end_report.cold+0x5a/0x5a [ 244.362885][T11724] kasan_report_invalid_free+0x70/0x80 [ 244.368384][T11724] __kasan_slab_free+0x118/0x130 [ 244.373361][T11724] slab_free_freelist_hook+0x92/0x210 [ 244.378779][T11724] kfree+0xe5/0x7f0 [ 244.382729][T11724] ? sg_finish_scsi_blk_rq+0x690/0x810 [ 244.388229][T11724] sg_finish_scsi_blk_rq+0x690/0x810 [ 244.393566][T11724] ? sg_execute_cmd+0x830/0x830 [ 244.398916][T11724] ? find_held_lock+0x2d/0x110 [ 244.403718][T11724] ? __might_fault+0xd3/0x180 [ 244.408530][T11724] ? lock_downgrade+0x6e0/0x6e0 [ 244.413424][T11724] sg_common_write+0xa07/0xe70 [ 244.418236][T11724] ? sg_start_req+0x24e0/0x24e0 [ 244.423128][T11724] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 244.429502][T11724] ? _copy_from_user+0x5d/0x180 [ 244.434626][T11724] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 244.441102][T11724] ? get_sg_io_hdr+0x15d/0x8d0 [ 244.446370][T11724] sg_v3_submit+0x3b1/0x530 [ 244.450891][T11724] ? sg_common_write+0xe70/0xe70 [ 244.455846][T11724] sg_write.part.0+0xaf8/0xec0 [ 244.460910][T11724] ? sg_v3_submit+0x530/0x530 [ 244.465613][T11724] ? __fget_files+0x266/0x3d0 [ 244.470306][T11724] ? lock_downgrade+0x6e0/0x6e0 [ 244.475167][T11724] ? apparmor_file_permission+0x26e/0x4e0 [ 244.481455][T11724] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 244.487731][T11724] ? security_file_permission+0x248/0x560 [ 244.493502][T11724] sg_write+0x87/0x120 [ 244.497582][T11724] ? sg_write.part.0+0xec0/0xec0 [ 244.502682][T11724] vfs_write+0x28e/0xa30 [ 244.506954][T11724] ksys_write+0x12d/0x250 [ 244.511294][T11724] ? __ia32_sys_read+0xb0/0xb0 [ 244.516062][T11724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 244.522104][T11724] do_syscall_64+0x2d/0x70 [ 244.526575][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 244.532603][T11724] RIP: 0033:0x465f69 [ 244.536897][T11724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 244.558013][T11724] RSP: 002b:00007f302b565188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.566695][T11724] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 244.576088][T11724] RDX: 00000000000000ab RSI: 0000000020000540 RDI: 0000000000000003 [ 244.584816][T11724] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 244.593750][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 244.602418][T11724] R13: 00007ffd5a23815f R14: 00007f302b565300 R15: 0000000000022000 [ 244.612366][T11724] Kernel Offset: disabled [ 244.617091][T11724] Rebooting in 86400 seconds..