10400006e7a1de4a21f379d206296a10da93357f3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d85820000000000000002f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d90700000000000000d236619074d6ebdf098bc908f50ad228a40f9411fe7226a4040b96e37c4f46010400000000000029faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b24bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7bb2b1ed81d2cf370ee4a2a00ebeb476ea3caae05f13792292cb949b3aab06b1e08ab1c156b97e5889685a96949e4cb4f8f67b8bb84b0e733a63784ccc214d930cbb7e090d63fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6335eb811a085ca14a7989f9777f600000000000000000000000000000000000000000000000000000000000386000000b854adb4f8080064e8407c6bdb37f4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e285d76488f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2b6cf7e246daecbfc95d19114cecdf2ca4c5b462a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953b78a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9ef547fd6ee9760d784cb1138e8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857f78b2414aa962a0550344b8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a5bd50c285aad69e1188276efae9387eaa232"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = gettid() tkill(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4010) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xff, 0xff000000], [0x0, 0x0, 0xff], 'bond_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x5, 0x7}, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x7ff, 0x1, 0x0, [0x9ca, 0x5dcc, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0x5], 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @remote, [0xff000000, 0xff0001fe], [0x0, 0x0, 0xffffff00, 0xff000000], 'geneve0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 08:47:33 executing program 0: io_uring_setup(0x6ba7, &(0x7f00000011c0)) 08:47:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed", 0x56}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:34 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@typedef, @const, @func_proto, @enum, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x64}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 08:47:35 executing program 5: keyctl$set_timeout(0xe, 0x0, 0x0) 08:47:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6be0e8a1a1288c472f1e5399df49e77a44fb07927c6ef5156f26d2", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:35 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xf7, 0x9}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x2, &(0x7f0000000140)=@string={0x2}}, {0x0, 0x0}]}) [ 770.549829][ T22] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 770.924655][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.935832][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.948476][ T22] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 770.959504][ T22] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 770.971199][ T22] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 770.982590][ T22] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 771.390001][ T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.399556][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.409068][ T22] usb 6-1: SerialNumber: syz 08:47:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 08:47:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) [ 771.702136][ T22] cdc_ncm 6-1:1.0: bind() failure [ 771.715072][ T22] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 771.724049][ T22] cdc_ncm 6-1:1.1: bind() failure [ 771.749284][ T22] usb 6-1: USB disconnect, device number 8 08:47:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef8", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef8", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 772.459872][ T9763] usb 6-1: new high-speed USB device number 9 using dummy_hcd 08:47:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@typedef, @const, @func_proto, @enum, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x64}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) [ 772.863083][ T9763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.889548][ T9763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.915958][ T9763] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 772.933478][ T9763] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 772.950659][ T9763] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 08:47:38 executing program 0: syz_open_dev$admmidi(&(0x7f0000000100), 0x20, 0x103301) [ 772.971897][ T9763] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 08:47:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:47:38 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x14, 0x0, 0x0) 08:47:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xffffffffffffff39) [ 773.359990][ T9763] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.391177][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.439999][ T9763] usb 6-1: can't set config #1, error -71 [ 773.459563][ T9763] usb 6-1: USB disconnect, device number 9 08:47:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xffffffffffffff39) [ 773.855956][ T9763] usb 6-1: new high-speed USB device number 10 using dummy_hcd 08:47:39 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 08:47:39 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)="89", 0x1}], 0x2, &(0x7f0000000400)=ANY=[], 0x248}, 0x0) [ 774.120846][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 774.260765][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 774.275128][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 774.500031][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 774.511026][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.519349][ T9763] usb 6-1: Product: syz [ 774.526072][ T9763] usb 6-1: Manufacturer: syz [ 774.532548][ T9763] usb 6-1: SerialNumber: syz [ 774.551085][ T9763] usb 6-1: config 0 descriptor?? 08:47:39 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xff}, 0x14016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6b, 0x8, 0x5, 0x40, 0x0, 0x800, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3}, 0x40000, 0x200, 0xffffff11, 0xe, 0x6b, 0x1, 0x5, 0x0, 0x20, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x1) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) [ 774.592193][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 774.620384][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 08:47:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 08:47:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 774.798493][T27632] udc-core: couldn't find an available UDC or it's busy [ 774.812101][T27632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 08:47:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef8", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 775.445354][ T22] usb 6-1: USB disconnect, device number 10 [ 775.453106][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 775.453446][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 775.535244][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:47:41 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xff}, 0x14016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6b, 0x8, 0x5, 0x40, 0x0, 0x800, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3}, 0x40000, 0x200, 0xffffff11, 0xe, 0x6b, 0x1, 0x5, 0x0, 0x20, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x1) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 08:47:41 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "946d1f1f", {0x3, 0x105, 0x0, 0x0, 0x0, 0x7, 0x9}}) pkey_mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0xffffffffffffffff) shmget(0x3, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x905612a5fe7b715b, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x29bda0a5, 0x4d, &(0x7f0000001300)=""/77, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x4, 0x1, 0x0, 0xffffffff}, 0x10}, 0x78) [ 776.249957][ T2939] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 776.349978][ T9738] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 776.640483][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 776.762082][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 776.783299][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 776.840885][ T2939] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 776.856680][ T2939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.882352][ T2939] usb 5-1: Product: syz [ 776.889304][ T2939] usb 5-1: Manufacturer: syz [ 776.899708][ C0] raw-gadget gadget: ignoring, device is not running [ 776.907017][ T2939] usb 5-1: SerialNumber: syz [ 776.919731][ C0] raw-gadget gadget: ignoring, device is not running 08:47:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:47:42 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000061c0)={0x0, 0x1110}}, 0x811) [ 776.939718][ C0] raw-gadget gadget: ignoring, device is not running [ 776.991990][ T2939] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 776.999980][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 777.026950][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.059063][ T9738] usb 6-1: Product: syz [ 777.101848][ T9738] usb 6-1: config 0 descriptor?? 08:47:42 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 777.167867][ T9738] usb 6-1: can't set config #0, error -71 [ 777.201489][ T9738] usb 6-1: USB disconnect, device number 11 08:47:42 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) read$midi(r0, 0x0, 0x0) 08:47:42 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xb963}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x81e]}, 0x8}) 08:47:42 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1e, 0x0, 0x0) 08:47:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 777.590628][ T9738] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 777.710836][ T9763] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:47:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}, 0x0) [ 777.839876][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 777.925724][ T9666] usb 5-1: USB disconnect, device number 6 [ 777.980363][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 778.009856][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 778.180729][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 778.197587][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:47:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa636", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 778.232660][ T9738] usb 6-1: Product: syz [ 778.236882][ T9738] usb 6-1: Manufacturer: syz [ 778.244415][ T9738] usb 6-1: SerialNumber: syz [ 778.269331][ T9738] usb 6-1: config 0 descriptor?? [ 778.312190][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 778.336314][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 778.558836][T27719] udc-core: couldn't find an available UDC or it's busy [ 778.574363][T27719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 778.832553][ T9763] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 778.842134][ T9763] ath9k_htc: Failed to initialize the device [ 778.848872][ T9666] usb 5-1: ath9k_htc: USB layer deinitialized [ 778.913101][ T2939] usb 6-1: USB disconnect, device number 12 [ 778.929771][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 778.937511][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:47:44 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "946d1f1f", {0x3, 0x105, 0x0, 0x0, 0x0, 0x7, 0x9}}) pkey_mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0xffffffffffffffff) shmget(0x3, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x905612a5fe7b715b, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x29bda0a5, 0x4d, &(0x7f0000001300)=""/77, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x4, 0x1, 0x0, 0xffffffff}, 0x10}, 0x78) 08:47:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:47:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r1, 0x0) 08:47:44 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:44 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:47:44 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 779.570382][ T9666] usb 5-1: new high-speed USB device number 7 using dummy_hcd 08:47:44 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:45 executing program 0: pkey_mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000d55000/0x3000)=nil, 0x4000) 08:47:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:45 executing program 0: io_uring_setup(0x3850, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x61}) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) [ 779.850846][T23997] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 780.090826][ T9666] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 780.100343][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 780.113071][ T9666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.136425][ T9666] usb 5-1: Product: syz [ 780.149231][ T9666] usb 5-1: Manufacturer: syz [ 780.159559][ T9666] usb 5-1: SerialNumber: syz [ 780.220780][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 780.233959][ T9666] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 780.253052][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 780.429985][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 780.439473][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.448919][T23997] usb 6-1: Product: syz [ 780.453434][T23997] usb 6-1: Manufacturer: syz [ 780.458210][T23997] usb 6-1: SerialNumber: syz [ 780.466089][T23997] usb 6-1: config 0 descriptor?? [ 780.532914][T23997] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 780.541350][T23997] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 780.777033][T27801] udc-core: couldn't find an available UDC or it's busy [ 780.785037][T27801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 780.848667][ T9666] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 781.081301][T23997] usb 5-1: USB disconnect, device number 7 [ 781.118828][ T9763] usb 6-1: USB disconnect, device number 13 [ 781.119756][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 781.132261][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:47:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa636", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:46 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:46 executing program 4: r0 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="87", 0x1, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 08:47:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:47:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:47:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:47:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:47 executing program 4: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000001080)='ceph\x00', &(0x7f00000010c0)={'syz', 0x1}, &(0x7f0000001100)='^\xa5%\x00', 0xffffffffffffffff) 08:47:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:47 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000280)={[{0x8, 0x4e00, "122906ee8d38670b"}]}) [ 781.949912][ T9666] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 781.959491][ T9666] ath9k_htc: Failed to initialize the device [ 781.980608][T23997] usb 5-1: ath9k_htc: USB layer deinitialized 08:47:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 782.150040][ T9771] usb 6-1: new high-speed USB device number 14 using dummy_hcd 08:47:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 782.350145][T23997] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 782.401080][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 782.520928][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 782.543280][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 782.710824][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 782.722198][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.733339][ T9771] usb 6-1: Product: syz [ 782.737997][ T9771] usb 6-1: Manufacturer: syz [ 782.745888][ T9771] usb 6-1: SerialNumber: syz [ 782.758299][ T9771] usb 6-1: config 0 descriptor?? [ 782.814273][ T9771] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 782.823507][ T9771] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 782.890638][T23997] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 782.913466][T23997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.933966][T23997] usb 5-1: Product: syz [ 782.938202][T23997] usb 5-1: Manufacturer: syz [ 782.959856][T23997] usb 5-1: SerialNumber: syz [ 783.021643][T23997] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.081446][T27877] udc-core: couldn't find an available UDC or it's busy [ 783.088588][T27877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 783.494343][ T9763] usb 6-1: USB disconnect, device number 14 [ 783.509734][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 783.516775][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 783.619851][T23997] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.036444][ T9771] usb 5-1: USB disconnect, device number 8 08:47:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa636", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:49 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = gettid() tkill(r0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002002, 0x0}}], 0xc6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x1fe000000, 0xff, 0xff000000], [0x0, 0x0, 0xff, 0xffffff00], 'bond_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x8, 0x5, 0x7, 0x60}, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x7ff, 0x1, 0x0, [0x9ca, 0x5dcc, 0xfffd, 0x2, 0x7, 0x2, 0x1, 0x3, 0x5, 0x0, 0xfffa, 0x1000, 0x1000, 0x1, 0x2, 0x5], 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @remote, [0xff000000, 0xff0001fe, 0xff], [0x0, 0xff, 0xffffff00, 0xff000000], 'geneve0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2c, 0x7f, 0x6, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x67, 0x7, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 08:47:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) [ 784.624917][T27953] x_tables: duplicate underflow at hook 3 [ 784.670185][T23997] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 784.683966][T23997] ath9k_htc: Failed to initialize the device [ 784.714985][ T9771] usb 5-1: ath9k_htc: USB layer deinitialized [ 784.749801][ T22] usb 6-1: new high-speed USB device number 15 using dummy_hcd 08:47:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:47:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 785.030400][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 785.119931][ T9771] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 785.164869][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 785.222174][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 08:47:50 executing program 4: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ff0000/0x1000)=nil) 08:47:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 785.524010][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f 08:47:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = gettid() tkill(r0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002002, 0x0}}], 0xc6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x1fe000000, 0xff, 0xff000000], [0x0, 0x0, 0xff, 0xffffff00], 'bond_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x8, 0x5, 0x7, 0x60}, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x7ff, 0x1, 0x0, [0x9ca, 0x5dcc, 0xfffd, 0x2, 0x7, 0x2, 0x1, 0x3, 0x5, 0x0, 0xfffa, 0x1000, 0x1000, 0x1, 0x2, 0x5], 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @remote, [0xff000000, 0xff0001fe, 0xff], [0x0, 0xff, 0xffffff00, 0xff000000], 'geneve0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2c, 0x7f, 0x6, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x67, 0x7, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) [ 785.569728][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.577819][ T22] usb 6-1: Product: syz [ 785.602061][ T22] usb 6-1: Manufacturer: syz [ 785.606922][ T22] usb 6-1: SerialNumber: syz 08:47:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 785.616533][ T22] usb 6-1: config 0 descriptor?? 08:47:51 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001840), 0x4f8782, 0x0) [ 785.682954][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 785.727976][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 785.888261][T27939] udc-core: couldn't find an available UDC or it's busy [ 785.930999][T27939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 785.938970][T28000] x_tables: duplicate underflow at hook 3 [ 786.005043][ T2939] usb 6-1: USB disconnect, device number 15 [ 786.011185][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 786.011222][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 786.056530][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:47:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:52 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:52 executing program 4: add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)="c913", 0x2, 0xfffffffffffffffd) 08:47:52 executing program 0: r0 = epoll_create(0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x5460, 0x0) 08:47:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:47:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) 08:47:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebde", 0x59}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:53 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x40305839, &(0x7f0000000040)={0xb, 0x0, 0x1, 0x0, 0x14000004}) fchmodat(r0, 0x0, 0x0) 08:47:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 788.343406][T23997] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 788.599900][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 788.738833][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 788.762482][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 788.941614][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 788.963988][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.973476][T23997] usb 6-1: Product: syz [ 788.977762][T23997] usb 6-1: Manufacturer: syz [ 788.984118][T23997] usb 6-1: SerialNumber: syz [ 788.997430][T23997] usb 6-1: config 0 descriptor?? [ 789.052010][T23997] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 789.086780][T23997] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 789.264696][T28039] udc-core: couldn't find an available UDC or it's busy [ 789.272284][T28039] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 789.302518][T23997] usb 6-1: USB disconnect, device number 16 [ 789.309931][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 789.325246][T23997] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:47:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:55 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:55 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x40305839, &(0x7f0000000040)={0xb, 0x0, 0x1, 0x0, 0x14000004}) fchmodat(r0, 0x0, 0x0) 08:47:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) [ 791.009896][ T2939] usb 6-1: new high-speed USB device number 17 using dummy_hcd 08:47:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d075", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:47:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:56 executing program 4: r0 = epoll_create(0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x801c581f, 0x0) 08:47:56 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x40305839, &(0x7f0000000040)={0xb, 0x0, 0x1, 0x0, 0x14000004}) fchmodat(r0, 0x0, 0x0) 08:47:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:56 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000001480)) [ 791.269779][ T2939] usb 6-1: Using ep0 maxpacket: 16 08:47:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:47:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="a9", 0x1}, {&(0x7f0000000200)="b9", 0x1}], 0x3}, 0x0) [ 791.401336][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 791.430145][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.619971][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 791.629299][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.649793][ T2939] usb 6-1: Product: syz [ 791.654042][ T2939] usb 6-1: Manufacturer: syz [ 791.658694][ T2939] usb 6-1: SerialNumber: syz [ 791.710571][ T2939] usb 6-1: config 0 descriptor?? [ 791.755017][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 791.772358][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 791.957624][T28087] udc-core: couldn't find an available UDC or it's busy [ 791.969575][T28087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 791.999338][ T9666] usb 6-1: USB disconnect, device number 17 [ 792.009720][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 792.016730][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 792.029308][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:47:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:47:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) 08:47:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002600), 0x4) 08:47:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x7}]}}, &(0x7f0000000400)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 08:47:59 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000040)=@ipx={0x4, 0x0, 0x0, "5c3071fb2593"}, 0x80, 0x0}, 0x0) 08:47:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004940)={0x0, 0x0, 0x0}, 0x40051) 08:47:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) 08:47:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000500), 0x10, &(0x7f0000000540), 0x0, &(0x7f0000000580)=[@ip_tos_int={{0xf}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x48}, 0x0) 08:47:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 08:47:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 08:47:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) [ 794.519815][ T9738] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 794.760041][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 794.881435][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 794.892503][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 795.059931][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 795.069360][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.078089][ T9738] usb 6-1: Product: syz [ 795.085862][ T9738] usb 6-1: Manufacturer: syz [ 795.090597][ T9738] usb 6-1: SerialNumber: syz [ 795.098289][ T9738] usb 6-1: config 0 descriptor?? [ 795.142121][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 795.160001][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 795.348555][T28163] udc-core: couldn't find an available UDC or it's busy [ 795.356464][T28163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 795.369753][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 795.389774][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 795.397385][ T9738] usb 6-1: USB disconnect, device number 18 [ 795.409743][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 795.417551][ T9738] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc5, &(0x7f00000000c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:02 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:02 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10040) 08:48:02 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 08:48:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40000002) 08:48:02 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:02 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f00000000c0)) 08:48:02 executing program 4: socketpair(0x23, 0x5, 0x2, &(0x7f00000002c0)) 08:48:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)={0x5, 0x5, 0x3, 0x209}, 0xa0) 08:48:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x17, 0x4, &(0x7f0000000840)=@framed={{}, [@call]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 797.209915][ T9763] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 797.489903][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 797.620684][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 797.632346][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 797.833057][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 797.842442][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.851185][ T9763] usb 6-1: Product: syz [ 797.855486][ T9763] usb 6-1: Manufacturer: syz [ 797.861347][ T9763] usb 6-1: SerialNumber: syz [ 797.881119][ T9763] usb 6-1: config 0 descriptor?? [ 797.935433][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 797.944032][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18 [ 798.141305][T28210] udc-core: couldn't find an available UDC or it's busy [ 798.148311][T28210] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 798.169019][ T2939] usb 6-1: USB disconnect, device number 19 [ 798.175272][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 798.175318][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 798.210651][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:05 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000400)=""/4096, 0x18, 0x1000, 0x1}, 0x20) 08:48:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10003) 08:48:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x4, &(0x7f0000001fc0)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000002040)='syzkaller\x00', 0x6, 0xd8, &(0x7f0000002080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:05 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x1, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) 08:48:05 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:05 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8914, &(0x7f0000000000)) 08:48:05 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 800.140764][T28271] ptrace attach of "/root/syz-executor.1"[28270] was attempted by "/root/syz-executor.1"[28271] 08:48:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000}, 0x40) [ 800.280052][ T9666] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 800.323870][T28282] ptrace attach of "/root/syz-executor.1"[28280] was attempted by "/root/syz-executor.1"[28282] [ 800.529915][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 800.652769][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 800.679544][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 800.860680][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 800.869971][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.878009][ T9666] usb 6-1: Product: syz [ 800.886129][ T9666] usb 6-1: Manufacturer: syz [ 800.893597][ T9666] usb 6-1: SerialNumber: syz [ 800.911793][ T9666] usb 6-1: config 0 descriptor?? [ 800.952173][ T9666] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 800.976967][ T9666] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 801.157721][T28262] udc-core: couldn't find an available UDC or it's busy [ 801.168184][T28262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 801.182435][ T9763] usb 6-1: USB disconnect, device number 20 [ 801.199723][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 801.206794][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:08 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:08 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000080)=@id, 0x10, 0x0}, 0x0) 08:48:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000200)="7adabf17aa3bce875567e1a0ff040414161d6dc7b55e57ee039be31730a8931bf240691c", 0x24}, {&(0x7f0000001240)="ce0b47d1b668e7c9d1a6867d973b5747e0b9fe3d9b5bf787bd0e9f8099c0f742de5846524958773af02ee854a0290169ced7bbfb8da781eba4c7dc87db5ee7656ec135de9c243c283dc50a66686eeac22abbe4a8010a435e3c78d1553d2b38a5a767d202ca12f95f5e7f6e2492951b776a1ae842d52c2d2707f1d4ffe86884a0df7bf53f6f64b0f60cbbd36f392a8b01d28673b5c11c6b3014363adad87420aa44cd980465a4787618d8601bf26aa01e6655cafc74d15cdf5ce27172acc9d038619b3ba396140688e130cc3214197ae667e59ba6dfb8d30bb740710d98a89600fa2bcb0e39b50f7ec0cb", 0xea}, {&(0x7f0000001340)="c98170cacf9d7514471efd1f2ca7b589883e066afaaa00b74c6a4df42914de38ca18151e99468fa25a01614f216c3829cc5ea2fcc2e8c408a453d8ae09985133135d926190", 0x45}, {&(0x7f00000013c0)="977ab1c7cbe08d9f1003a8470ee87eed4b955001d7fd39db8e3964e759ac55ede3cba7e53e8515a202f544c84e8c99d434dc527c39033b70afb88229be760731fe037f6ea3975f52d49d036c4b756434f618a967de56a0f911e5c24af9f7a9f8eaef1407204da0243791330ea8c853952ce0dad610fac246f831d73a32dea224dc6b3d84a3315cb9d2f4484d516a3b28502b89d970a31bd452cef84d56990eff158648e5e6094f543c9049d85ee411a3c2febc9218622eced96f4633ba0536b7d725ed0e9974872b9de3a4d2276297de26b408012a4ea92b87c96efcb1c1321d57422064ee36baaa794dcf758fdd1795688dcd421bf046681ab87e02ce5bf4a69fede9e6b3276d7f9edb242d559f314892b3f0c98690aec898d0e3030fc95ed1243ad8aea8f7eb07e6d50b1a4f417627936a493e2096ccf65c0032df24461456e2d35ceb3d31451ac9f60bcc8236b1f75fe7582098a4002d2a90999114cd6009fcd3a085c5c6bc0ebb46c45e6e3520e7bdf5557c760b0fcbe01b393418ec278f0efd36170149a06aadcb34a14d2b3e00a44b90cf1abfa8c6d3ba371e797f91431a252b7142f443fa50470d68b107901bbae9f68210710b22dab0450af5ca1425dafcd99506390d739c7274acd7337c4f8f3741e0783a93ed8167e018a48441f4c09726b5cafb860bc7c26c0510b84a134e2375357d691d218f15f3af2d63e8cfd6d99a65ebb1f14093e5c6b7b7ded9b57285276e679e6d37010ea5f3cacbb478668fd21d703b1937069f3bddae1080aa3c712e02c38630b520fcf3a461dfe3d029f4ba6aab59bf9954fefdf5c7e94fb9a9bb8166848e6458785c579c6fceb8487211ae230025441030d2d8a87992bbab9e4dd57782ffa14a471f2d1d0bc42303b364da94018cae12c024e488c1b1c05b6c60796f1a3dba502230f5f218555d3d0423ba336679127d64d7268393ddb4885cc48c09c8e2ee54e01292075f5bff7b0acef017cfb19642b30ebeeed348604106b5d2e98fc97f06a473ada68a7a5859baccbce511d5f465e2c9b53282dfac911f49719758e6cfd8d9bf0fc39e1fb75f9a96095b3ecdbd5ab2d8ed51933e07abcd926cb3c81a80caafd91881bdee95b0da6093c0e2efc90a1aa5e1cd5562a9da2c6f91fd6b1a67a100759bed9fe02dd7ed5cd61d397d31a902ef71838179754b5ef637d55af1c2d952d300cc51bb90eea693a2348ef10e02349c89ad3ba0164afb63db35b3afeddce114d6e871d864e0e677fb7e6f6d07881f533a7c5e81ecb66efca3fb2bce820a13f30309ced607a32fc84cb6a0605883462efc7729c94dbd245c4352d767a63d0efe683b51f3e7b05cfc4951d084f1a99ba471003c8043bc70604b6722de7c765dec42d7dbfad86e3e3cccd4322f332dd2d914fad2c87bfca44a9bd6a4ba9cc71f1ae82eb11423c7b74abbb38b9ce12020e727c1ca2f3a714991181acd49ef980bf7e3e31ba863e2a7a72773ecd58d1c3d2386f0b5393d24e81b400cfb75dd4a72fbbe855196566a7253255cf8f2252e636d7aaba5e9f47cfb63915486579ec1bef59e9ee76a484b25f85c23874c3156bf188bb8ab2b710273cd0109d2fb280f10da8f5478ef197ddace804c71cde7f47b1cf284f8f283a0511479be05a022278413f79b5b425215ab28664e55ea68d70911e9cbf21e90b15eb12fd04504b9d0e09dca6b45e112bfced37f44771c78d710e6a6e2cd0c9f85fd3274cc5171cf39c9c8c27dc56083f6214bf54df3d0f13d9a427504899b5644cfb8abe712ec7f565ec7cb2d502f057f205e7e024fb737009f469e7b0c659d7f8c4354849579f1c233b2ee871dc9aa454039a8e7cb638ba2a6cae6b62b7be969977a90b73d6cdc3290eaca106b0e92f8f1a40152e1efdbc014272d4065fe2875b4e3ea7d42c8cbffee733119cb5c498f1205becf2144b1509aac4632ddef1516dd92ac243d0717e030d89a48a640dc4c62078ee3f99c0643b5f2a7e5b622ca46ed6bcbec66d86fe8691609926426ca71fc2832b23b37492517f6977914d08eb00ce3fdc13f17c4baaa09dd3a86820c364401e5bdc25307ed6c694a050c5c2b0e22aa0833f465f859ece6ce18ba31ed85fcf9b0e43a58f9ee8c044521ffb116f2f2c446201b75db04309e4b44da913f860d1b6f4b486a70c6845a3ef5f79dec2adb64b1566af6f445ff0881ef6ef316f97bd595240987238d67a4b32b0760861aa68ba1cbc648dae98fe9a1c1b104ea28a5644fc3e6719aae0ba4e59cd9e60a37428d7aa50c7eb7fadbfc56de5488c6dfc06f97761a24e8ebe61635fb4806ce92202a1f8c1810dcbc487e8f62da41d1bdbd050699faca245404b6c95082e465c468a3148959d6e7783e7377f97b0c8c3d9912c7c3de8c07d355e4c2ae7c59a2c5d48d7cb809daf9081ab5957fe45d1bb4a96906840e706d84d335c28866f8858004460bb8b9eb6218c7fcbdc3f525d906dca3f67901dc5a7475df6ac60a3ed13f9a76b7b6845c7f7e02849fa16352c7c21a59139c0b844ce41619693d626b439e373decb450013a50634ec584d6095cbbfd5ba82972e3ce042ca5ea4efc0d78142cefa2e695d8c0ec552922788b8b56a7669cd8949cb785752b04ed2b5d0849b9e0514b61b066c7f875d7d235ccdf652a96c190ca5d447f564079776244f207522314f42df00ce61b9ed49e52c5f24b0fccc912eaf0a4b283862e34bbdec4aa68384ebc4305d7fdb43fcec6345e15dc566969f5f5783496fba06cb3ddf8a4824020848f0a8ba98bf64686fd8e0bc6e8b4cb935d9dfdbb2b93b561e8726ef973f947568d438c25519d5c6e7e68c94244e887932a0455bf2f170a6fe174e5c06cc672a78f5c5270c4c38b7f71cfedd5afce67cc28f3edcd8296749afdb471f202d3a5181b53b3d03ff6eef354f0c06ea1889f1dfbaf0857eea7baad54d2e002177f66068f9d8e6b3cbaebfabea580e992750ddcd3dc3f8fc74cf09a4a212aa27e496cadbdf40978bcb6147749c8bd9c8f57d54f9c93cc212c4c52b4ccc9d3b909418e4717fac151897e5fc268e6555beb8328b839fdb413994dc05200a6b24c0df29b6d95d932ca8e426c28f0e6bfc8ec50cc8711a2b5a0850859246b9f1a684d1fe4e40f0173302f71f8f64b0865be8442b0b8fbaa2e7495720c7c824594da5809dfea1f76add978741144c4c3b33fb630fe4def880eb179565425be014c2e07ac8b9b1d84da3c376e8b82695d8071fd06d9396a6ee9594319a74d2dee298f9b835be38532cde6d69c4c0919e1118da6ac3cab9d29c32154122cb07cbae845efa6ceaad6b49a6b6fb6a478704af8ba08f3225c7f9079e8dfb29a56c1c9e352282debc5935739be0ec9d0903cae73f16498a37f49c879565cd2d07db4ab33003ac694c104ed950771909b1839a2d32f75079d37708add8f56b6244a1165f3ce6f1772ca9eced67400ef77e3ca8b3109f4738e73013291b840ba465a544def0981cda118e9c2097d98fbe02c5a377f8093e3e074ae6c45f28670eb70588ffa6d10a757a4e5ebb715903446aace4837e0e925d3f2d50f1a605cffa24600a2875ea8ef7eba91f45f0b66b8251a591c1729857015809195b87138d7da3e5f610202b21e8a6944f61875508aa0a5db39b411436616b88082eef97a8bfd357c87db8487ee02caef2a4e15bfb081aa1946fd2d2d773af8ae2b73ca837a2686ec560b64817a9bb2b9d1013eac6a310b25ae9e93208ff914b88125bb558264ce45ada176c509b1bed2fd99b84c4bc6246e741ad589d9e490700c4484ae2c3ef0eb1aa4eaafdb0d2cd5fff51a4a41b1e2ef914e86437df446a7dd5e9dc1f08ac204f52daf5260204b680baa4d6e54318f2311e97e60561d3eacb6e336c9ebb0acf62df188c1222bf76f6fbdcf71e6325456aeeae6f0386090a299fe506250864750819444d2849368cb08d9a8a2c928922dbf6a74ae7576905d4695e514bfdd91ba748564486955248205c5e8e331cd2547c51f874562d68513736aaee75c0722ea6f130c1b2350352e2e5c666d8cd0c1f82fc792b5863bf153fddbc86c13d63fab667504d9b813577c8968ab380efc8fe36dc7096a5ab40521a22b455754b85ff94f3d39167c737e468667fc58a28c7db0563b482302b54ee8961eedcb79fb43df56ba097c5784ba440b78b43a53a4af3ae3d5added1378cbd4fe8d5cce49772abd3e476b32e42879ee09c6c679281c67178e69248f6e06914e16107203ed1e53b56122445f518212b41bd55c66404e94fc95d668f5e5a9c824cff1485953043b94a7c5afe6302fe5f780dfe3fda3351d2828b88b761f8959a5cc01a62e9237ce01cc9ec41508d605267c42de1f4eb37c939f4194828de0491c7f84c58cea226b542322f2e9c07bb70ca88fae22e07d56b2150fd32ee152644498eb86610d3d064808e6f813440cde6b3094181922e2f5cc28ffb75ef39a4ed35fba183134c5cf0e6707927f5c3f8fc39177bd0f8f99498ad61819f2d34f400357fe28855d809048bdbc33625cda57836acde9e4c23158adc83e780b65032e6b8d5fb2f61d99105464756277984f15ebe8d953ffef0bd214a660406ad42fa09c49cf2efcb60c67412efac9cf9b4b266ad9aae52e763405a552c9bfe2985892e70c56b810554ef04f4b40c419c8b2f9c7767495536771fd507d1c0d7f2a9a9dcbd15cfefca9c38460032dee9d8ad60a045aa2f6e9479468ec99a29435e8f3a16369e8d1991a1e165bac2b63c74204d734e976a328b23f9d4a02822688f2ca9546f1beb4b68755757ff662282c557e02e1ef231818ea30090cff53de4f8c49e147b991d015e23e9a4e227d7", 0xd6e}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005d00)=[{0x0}, {&(0x7f0000006580)=""/4096, 0x1000}], 0x2}, 0x0) 08:48:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f00000015c0)=""/4096, 0x32, 0x1000, 0x8}, 0x20) [ 803.119863][T28317] BPF: (anon) type_id=4 bits_offset=0 [ 803.137428][T28321] ptrace attach of "/root/syz-executor.1"[28319] was attempted by "/root/syz-executor.1"[28321] 08:48:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003300)=[@mark={{0x14}}], 0x18}, 0x0) 08:48:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 803.180096][T28317] BPF: [ 803.189573][T28317] BPF:Invalid member 08:48:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003980)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) [ 803.224566][T28317] BPF: [ 803.224566][T28317] [ 803.243094][T28317] BPF: (anon) type_id=4 bits_offset=0 [ 803.267336][T28317] BPF: [ 803.283208][T28317] BPF:Invalid member [ 803.300415][T28317] BPF: [ 803.300415][T28317] 08:48:08 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:48:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 803.410334][ T9763] usb 6-1: new high-speed USB device number 21 using dummy_hcd 08:48:08 executing program 4: syz_open_procfs$namespace(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000031c0)) 08:48:08 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) unlink(&(0x7f0000002300)='./file0\x00') [ 803.679782][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 803.830650][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 803.850187][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 804.050102][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 804.059189][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.078598][ T9763] usb 6-1: Product: syz [ 804.084440][ T9763] usb 6-1: Manufacturer: syz [ 804.089072][ T9763] usb 6-1: SerialNumber: syz [ 804.110827][ T9763] usb 6-1: config 0 descriptor?? [ 804.152064][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 804.178224][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 804.365346][T28320] udc-core: couldn't find an available UDC or it's busy [ 804.372811][T28320] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 804.393701][ T9738] usb 6-1: USB disconnect, device number 21 [ 804.409772][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 804.417034][ T9738] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:11 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x610481, 0x0) 08:48:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 08:48:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x3, &(0x7f0000000840)=@framed, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:11 executing program 0: socketpair(0x1d, 0x0, 0x1, &(0x7f0000000200)) 08:48:11 executing program 2: bpf$BPF_PROG_DETACH(0x13, &(0x7f0000000bc0)={@map}, 0x10) 08:48:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@ipx={0x4, 0x0, 0x0, "2b2e16da4084"}, 0x80, 0x0}, 0x0) 08:48:11 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000200)="faac826baf1749c54ea7785b389556e5c957a8a5c67a528e6bbf56793da114c66130ebb44156aaa7d1c819cd93f5cdec11b6e903af7bbaeb3b7050", 0x3b}, {&(0x7f0000001300)="3ee21b331740171bd064b60b9b0ce0cfc217c4441362066e084d8b2015baf4b8401fa2e1aeb0c1948727e458bddbc06e136fedf87396881bd195d08ec066e1a00f899bf1af2984d6c50374ad42164f793b8395ff9d8c08198261b0bf4e55f30b71c677c27039d223e5ba9f327a9645c24eb482ea55d128bd79dcc6dd44bbac5c5ca5dae30895ddd6be69fbfc70f1d8bca96956d36ffb9fc1d696ff79c3bdd92e758b24751d426cceca70d83ba4e52d489e1a8cb96565b953ca19b2aacb4795fae9bd642adcfb2fc1229c97838b990825b2aaf3bc5e6f8e", 0xd7}, {&(0x7f0000000240)="1777317db21b9d7439513f1609", 0xd}, {&(0x7f0000001400)="f75db666393d2be3dfc7ad9fe9a1f776a0c6143bff59653a410689fa75bdc6f73f94265868b7cd150b91c612d1e3f504b5269fbe0e4a24a3101a192d1ec3ae3b857115afff6d5f49147756af249667b2389aaafba0d1268b8efa698ed51bb6d27af6e3207c44f3488b3b2af2c65610f4745f62dc4dce20d002b5bc2c15288f64950f942c63233ad297974dcb609b62f7399758ac304b271b0380c44509d557c866c9ae7cd0317a839dd6b01112637028296b95c6240b6590501ecba3f05479adea71b2", 0xc3}, {&(0x7f0000001500)="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", 0xcdf}], 0x6}, 0x0) 08:48:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000840)=@framed={{}, [@call]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 806.580835][ T9738] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 806.829976][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 806.950700][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 806.972926][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 807.152524][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 807.161768][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.171672][ T9738] usb 6-1: Product: syz [ 807.175975][ T9738] usb 6-1: Manufacturer: syz [ 807.180698][ T9738] usb 6-1: SerialNumber: syz [ 807.193107][ T9738] usb 6-1: config 0 descriptor?? [ 807.232163][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 807.250973][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 807.436016][T28379] udc-core: couldn't find an available UDC or it's busy [ 807.443424][T28379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 807.464670][ T9738] usb 6-1: USB disconnect, device number 22 [ 807.479765][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 807.487644][ T9738] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 808.431441][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.437839][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 08:48:14 executing program 4: socketpair(0xa, 0x5, 0x0, &(0x7f00000000c0)) 08:48:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@ipx={0x4, 0x0, 0x0, "2b2e16da4084"}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x0) 08:48:14 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1, &(0x7f0000001300)=ANY=[], 0x1338}, 0x8000) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='1', 0x1}], 0x1, &(0x7f0000000380)=ANY=[], 0x590}, 0x0) sendmsg(r0, &(0x7f0000009840)={0x0, 0x0, &(0x7f0000009740)=[{&(0x7f00000093c0)="13", 0x1}], 0x1}, 0x0) 08:48:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000057c0)={&(0x7f0000001080)=ANY=[], &(0x7f00000047c0)=""/4096, 0x41, 0x1000, 0x1}, 0x20) 08:48:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001280)={0x6, 0x4, 0x6, 0xfffffffb, 0x3}, 0x40) 08:48:14 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x1338}, 0x0) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)='w', 0x1}], 0x1}, 0x0) 08:48:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5, 0x1}]}]}}, &(0x7f0000000400)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 08:48:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 809.772942][ T2939] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 810.059796][ T2939] usb 6-1: Using ep0 maxpacket: 16 [ 810.190662][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 810.209811][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 810.400754][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 810.410050][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.418074][ T2939] usb 6-1: Product: syz [ 810.426679][ T2939] usb 6-1: Manufacturer: syz [ 810.432762][ T2939] usb 6-1: SerialNumber: syz [ 810.448917][ T2939] usb 6-1: config 0 descriptor?? [ 810.492298][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 810.514979][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 810.700205][T28433] udc-core: couldn't find an available UDC or it's busy [ 810.707483][T28433] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 810.728245][ T9763] usb 6-1: USB disconnect, device number 23 [ 810.734357][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 810.734400][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 810.777794][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:17 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x1338}, 0x0) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)='w', 0x1}], 0x1}, 0x0) 08:48:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff}) close(r0) 08:48:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:17 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8902, &(0x7f0000000000)) 08:48:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:17 executing program 2: socketpair(0xa, 0x3, 0x0, &(0x7f0000000040)) 08:48:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000057c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000047c0)=""/4096, 0x41, 0x1000, 0x1}, 0x20) 08:48:18 executing program 0: bpf$BPF_PROG_DETACH(0x14, &(0x7f0000000bc0)={@map, 0xffffffffffffffff, 0x11}, 0x10) 08:48:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 812.899865][ T2939] usb 6-1: new high-speed USB device number 24 using dummy_hcd 08:48:18 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='\x00'}, 0x10) 08:48:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x489}, 0x40) [ 813.170169][ T2939] usb 6-1: Using ep0 maxpacket: 16 [ 813.311368][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 813.334818][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 813.519844][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 813.529031][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.537705][ T2939] usb 6-1: Product: syz [ 813.542115][ T2939] usb 6-1: Manufacturer: syz [ 813.546841][ T2939] usb 6-1: SerialNumber: syz [ 813.560726][ T2939] usb 6-1: config 0 descriptor?? [ 813.622320][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 813.637192][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 813.837369][T28489] udc-core: couldn't find an available UDC or it's busy [ 813.844684][T28489] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 813.861944][ T2939] usb 6-1: USB disconnect, device number 24 [ 813.869748][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 813.886547][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 08:48:21 executing program 4: socketpair(0x2c, 0x3, 0x8, &(0x7f0000000000)) 08:48:21 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000b80)) 08:48:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7}]}]}}, &(0x7f0000000180)=""/238, 0x2e, 0xee, 0x1}, 0x20) 08:48:21 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14}, 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000f940)={0x10, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000f8c0), 0x8, 0x10, 0x0}, 0x78) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000013700)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000148c0)={0x0, 0x5, &(0x7f00000137c0)=ANY=[@ANYBLOB], &(0x7f0000013800)='GPL\x00', 0x5, 0x1000, &(0x7f0000013840)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000014940)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x12, r1, 0x8, &(0x7f0000013740)={0x5}, 0x8, 0x10, &(0x7f0000013780)={0x0, 0x6d, 0x10000}, 0x10, 0xffffffffffffffff, r2}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x1}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = socket$kcm(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000700)={r4, r5}) 08:48:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001400)={&(0x7f0000000000), 0x10, 0x0}, 0x44) 08:48:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:21 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8940, &(0x7f0000000000)) 08:48:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x4, &(0x7f0000000840)=@framed={{}, [@call]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 816.110066][ T9738] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 816.389778][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 816.547753][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 816.566242][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 816.750836][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 816.765414][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.780708][ T9738] usb 6-1: Product: syz [ 816.785198][ T9738] usb 6-1: Manufacturer: syz [ 816.800787][ T9738] usb 6-1: SerialNumber: syz [ 816.820555][ T9738] usb 6-1: config 0 descriptor?? [ 816.872568][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 816.899633][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 817.078311][T28549] udc-core: couldn't find an available UDC or it's busy [ 817.085596][T28549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 817.107354][ T9763] usb 6-1: USB disconnect, device number 25 [ 817.119708][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 817.127629][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:24 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8904, 0x0) 08:48:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:48:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:24 executing program 4: socketpair(0x22, 0x0, 0x8000, &(0x7f00000003c0)) 08:48:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:24 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:48:24 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89a0, &(0x7f0000000000)) 08:48:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:24 executing program 0: socketpair(0x2b, 0x801, 0x1, &(0x7f0000000000)) 08:48:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:24 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000001140)={&(0x7f0000000000)=@can, 0x80, 0x0}, 0x0) 08:48:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000180)=""/238, 0x26, 0xee, 0x1}, 0x20) [ 819.160026][ T9771] usb 6-1: new high-speed USB device number 26 using dummy_hcd 08:48:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:24 executing program 0: socketpair(0x2, 0xa, 0x0, &(0x7f0000000140)) 08:48:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], 0x1}, 0x20) 08:48:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 819.430176][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 819.550482][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 819.570029][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 819.765033][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 819.789884][T23997] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 819.797508][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.808656][ T9771] usb 6-1: Product: syz [ 819.822805][ T9771] usb 6-1: Manufacturer: syz [ 819.827455][ T9771] usb 6-1: SerialNumber: syz [ 819.839215][ T9771] usb 6-1: config 0 descriptor?? [ 819.902393][ T9771] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 819.921896][ T9771] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 820.107777][T28608] udc-core: couldn't find an available UDC or it's busy [ 820.128266][T28608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 820.156317][ T2939] usb 6-1: USB disconnect, device number 26 [ 820.169777][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 820.176879][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 820.191075][T23997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.214764][T23997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.231116][T23997] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 820.250225][T23997] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 820.429973][T23997] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.430025][T23997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.430055][T23997] usb 3-1: Product: syz [ 820.430078][T23997] usb 3-1: Manufacturer: syz [ 820.430099][T23997] usb 3-1: SerialNumber: syz 08:48:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:26 executing program 0: socketpair(0xa, 0x1, 0x0, &(0x7f00000003c0)) 08:48:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x4, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe00}]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 820.706174][T28649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.718029][T28649] raw-gadget gadget: fail, usb_ep_enable returned -22 08:48:26 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000000080)=""/164, 0x26, 0xa4, 0x1}, 0x20) [ 821.008744][T23997] cdc_ncm 3-1:1.0: bind() failure [ 821.030091][T23997] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 821.050049][T23997] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 821.070227][T23997] usbtest: probe of 3-1:1.1 failed with error -71 [ 821.092868][T23997] usb 3-1: USB disconnect, device number 6 [ 821.109873][ T2939] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 821.369816][ T2939] usb 6-1: Using ep0 maxpacket: 16 [ 821.490674][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 821.505691][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 821.679943][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 821.689118][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.704126][ T2939] usb 6-1: Product: syz [ 821.711408][ T2939] usb 6-1: Manufacturer: syz [ 821.716066][ T2939] usb 6-1: SerialNumber: syz [ 821.732094][ T2939] usb 6-1: config 0 descriptor?? [ 821.769951][ T9738] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 821.787294][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 821.818008][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 821.988574][T28684] udc-core: couldn't find an available UDC or it's busy [ 822.002186][T28684] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 822.026201][ T2939] usb 6-1: USB disconnect, device number 27 [ 822.032404][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 822.032453][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 822.060330][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:27 executing program 0: perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) 08:48:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006540)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) [ 822.190079][ T9738] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.201250][ T9738] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.214146][ T9738] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 822.227110][ T9738] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 08:48:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x1c}, 0x40) 08:48:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 822.441968][ T9738] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.458474][ T9738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.480484][ T9738] usb 3-1: Product: syz 08:48:27 executing program 2: socketpair(0x2b, 0x801, 0x1, &(0x7f0000000140)) [ 822.491200][ T9738] usb 3-1: Manufacturer: syz [ 822.503546][ T9738] usb 3-1: SerialNumber: syz 08:48:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x3, &(0x7f0000000840)=@framed, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x78) 08:48:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 822.570067][ T9738] usb 3-1: can't set config #1, error -71 [ 822.593987][ T9738] usb 3-1: USB disconnect, device number 7 08:48:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:27 executing program 0: bpf$MAP_CREATE(0x11, &(0x7f00000000c0), 0x40) 08:48:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 08:48:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:28 executing program 4: socketpair(0x1d, 0x0, 0x6, &(0x7f0000000040)) 08:48:28 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="ad", 0x1}], 0x1}, 0x4c080) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)='e', 0x1}], 0x1}, 0x0) 08:48:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xfffffffffffffffe}, {0x0}], 0x9}, 0x0) 08:48:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:28 executing program 0: recvmsg$kcm(0xffffffffffffffff, 0x0, 0xfe84ff2d8a3c0533) [ 823.120078][ T9771] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 823.390142][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 823.559838][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 823.581846][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 823.780924][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 823.795378][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.816859][ T9771] usb 6-1: Product: syz [ 823.828673][ T9771] usb 6-1: Manufacturer: syz [ 823.837229][ T9771] usb 6-1: SerialNumber: syz [ 823.846723][ T9771] usb 6-1: config 0 descriptor?? [ 823.941024][ T9771] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 823.967821][ T9771] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 824.146456][T28759] udc-core: couldn't find an available UDC or it's busy [ 824.183940][T28759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 824.204472][ T9771] usb 6-1: USB disconnect, device number 28 [ 824.210545][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 824.210589][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 824.228156][ T9771] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}, 0x0) 08:48:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xb2, &(0x7f0000000100)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={0x0, &(0x7f00000015c0)=""/4096, 0x0, 0x1000, 0x8}, 0x20) [ 824.785948][T28821] BPF:hdr_len not found [ 824.793294][T28821] BPF:hdr_len not found 08:48:30 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000080)) 08:48:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x1b00, 0x7}, 0x40) 08:48:30 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 08:48:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:30 executing program 2: socketpair(0xa, 0x1, 0x5, &(0x7f00000003c0)) [ 825.249935][ T9771] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 825.519863][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 825.650051][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 825.661153][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 825.839913][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 825.849065][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.857770][ T9771] usb 6-1: Product: syz [ 825.862435][ T9771] usb 6-1: Manufacturer: syz [ 825.867071][ T9771] usb 6-1: SerialNumber: syz [ 825.876561][ T9771] usb 6-1: config 0 descriptor?? [ 825.932354][ T9771] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 825.950962][ T9771] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 826.137813][T28828] udc-core: couldn't find an available UDC or it's busy [ 826.145332][T28828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 826.161307][ T9771] usb 6-1: USB disconnect, device number 29 [ 826.169761][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 826.177532][ T9771] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:32 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0) [ 827.039903][ T9771] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 827.309958][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 827.480410][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 827.491409][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 827.680054][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 827.689173][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.697796][ T9771] usb 6-1: Product: syz [ 827.702535][ T9771] usb 6-1: Manufacturer: syz [ 827.707166][ T9771] usb 6-1: SerialNumber: syz [ 827.726926][ T9771] usb 6-1: config 0 descriptor?? 08:48:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:33 executing program 0: socketpair(0x2, 0x1, 0x0, &(0x7f0000000040)) 08:48:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:33 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe23}, 0xa2) 08:48:33 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f000000a100)={0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009c80)=""/204, 0xcc}], 0x1}, 0x0) [ 827.783401][ T9771] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 827.806970][ T9771] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 08:48:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89a0, &(0x7f0000000000)) 08:48:33 executing program 2: socketpair(0x1d, 0x802, 0x2, &(0x7f0000000040)) 08:48:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000003100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x161) [ 827.988810][T28875] udc-core: couldn't find an available UDC or it's busy [ 828.008321][T28875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 08:48:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 828.050017][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 828.060536][ T9771] usb 6-1: USB disconnect, device number 30 [ 828.073198][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 828.080929][ T9771] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:33 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) 08:48:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x4, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000027c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001380)=""/178, 0xb2}, 0x0) close(r0) 08:48:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5}, 0x40) 08:48:36 executing program 4: socketpair(0x18, 0x0, 0x5, &(0x7f0000003cc0)) 08:48:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x400}, 0x40) 08:48:36 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) 08:48:36 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x2, &(0x7f0000000000)) 08:48:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x4, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x48}]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 831.220470][ T9773] usb 6-1: new high-speed USB device number 31 using dummy_hcd 08:48:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}}, &(0x7f0000000080)=""/163, 0x36, 0xa3, 0x1}, 0x20) [ 831.470233][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 831.589984][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 831.601299][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 831.770100][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 831.780145][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.788674][ T9773] usb 6-1: Product: syz [ 831.793177][ T9773] usb 6-1: Manufacturer: syz [ 831.797957][ T9773] usb 6-1: SerialNumber: syz [ 831.810852][ T9773] usb 6-1: config 0 descriptor?? [ 831.852244][ T9773] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 831.868180][ T9773] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 832.060355][T28943] udc-core: couldn't find an available UDC or it's busy [ 832.067367][T28943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 832.086672][ T9771] usb 6-1: USB disconnect, device number 31 [ 832.092734][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 832.092758][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 832.131023][ T9771] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:39 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/187, 0xbb}, 0x10062) 08:48:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6000000000000000010000000100000050"], 0x60}, 0x0) 08:48:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)={0x5, 0x5, 0x3, 0x209, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 08:48:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:48:39 executing program 2: socketpair(0xa, 0x806, 0x0, &(0x7f0000000040)) 08:48:39 executing program 0: socketpair(0x18, 0x0, 0x2, &(0x7f0000000980)) 08:48:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:39 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r0) [ 834.305245][ T37] audit: type=1400 audit(1620636519.621:137): avc: denied { create } for pid=29006 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 08:48:39 executing program 2: socketpair(0x11, 0xa, 0x300, &(0x7f0000000140)) 08:48:39 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1, &(0x7f0000001300)=ANY=[], 0x1338}, 0x0) sendmsg(r0, &(0x7f0000009840)={0x0, 0x0, &(0x7f0000009740)=[{&(0x7f00000093c0)="13", 0x7ffff000}], 0x1}, 0x0) [ 834.430012][T23997] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 834.699895][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 834.850081][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 834.871004][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 835.079934][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 835.090204][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.098202][T23997] usb 6-1: Product: syz [ 835.105380][T23997] usb 6-1: Manufacturer: syz [ 835.112501][T23997] usb 6-1: SerialNumber: syz [ 835.118912][T23997] usb 6-1: config 0 descriptor?? [ 835.192235][T23997] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 835.208253][T23997] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31 [ 835.397379][T28999] udc-core: couldn't find an available UDC or it's busy [ 835.404877][T28999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 835.427391][T23997] usb 6-1: USB disconnect, device number 32 [ 835.449814][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 835.465337][T23997] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 08:48:42 executing program 2: socketpair(0x2, 0x5, 0x40, &(0x7f00000000c0)) 08:48:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000006c0)=@raw=[@func, @generic, @map, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @ldst], &(0x7f0000000740)='syzkaller\x00', 0x3, 0x94, &(0x7f0000000800)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:42 executing program 0: socketpair(0x11, 0x0, 0x0, &(0x7f0000000340)) 08:48:42 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="ad", 0x1}], 0x1}, 0x4c080) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 08:48:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0xc00, 0x0, 0x6}]}}, &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x8}, 0x20) 08:48:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 837.549782][ T9771] usb 6-1: new high-speed USB device number 33 using dummy_hcd 08:48:42 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x1, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) [ 837.621534][T29075] BPF:[1] ENUM (anon) [ 837.628987][T29075] BPF: [ 837.654031][T29075] BPF:meta_left:0 meta_needed:24576 [ 837.670328][T29075] BPF: [ 837.670328][T29075] [ 837.685071][T29075] BPF:[1] ENUM (anon) [ 837.692847][T29075] BPF: [ 837.697067][T29075] BPF:meta_left:0 meta_needed:24576 [ 837.716251][T29075] BPF: [ 837.716251][T29075] [ 837.799831][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 837.920637][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 837.935358][ T9771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 838.099999][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 838.109233][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.118916][ T9771] usb 6-1: Product: syz [ 838.124752][ T9771] usb 6-1: Manufacturer: syz [ 838.129542][ T9771] usb 6-1: SerialNumber: syz [ 838.138670][ T9771] usb 6-1: config 0 descriptor?? [ 838.192257][ T9771] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 838.208526][ T9771] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 838.398623][T29052] udc-core: couldn't find an available UDC or it's busy [ 838.406948][T29052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 838.431417][ T9771] usb 6-1: USB disconnect, device number 33 [ 838.449752][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 838.457269][ T9771] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 08:48:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:45 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="60000000000000000100000001"], 0x60}, 0x0) 08:48:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:45 executing program 4: socketpair(0x18, 0x0, 0x0, &(0x7f0000000540)) 08:48:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:45 executing program 2: socketpair(0x2b, 0x1, 0x8003a, &(0x7f00000000c0)) 08:48:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000200)="faac826baf1749c54ea7785b389556e5c957a8a5c67a528e6bbf56793da114c66130ebb44156aaa7d1c819cd93f5cdec11b6e903af7bbaeb3b7050", 0x3b}, {&(0x7f0000001300)="3ee21b331740171bd064b60b9b0ce0cfc217c4441362066e084d8b2015baf4b8401fa2e1aeb0c1948727e458bddbc06e136fedf87396881bd195d08ec066e1a00f899bf1af2984d6c50374ad42164f793b8395ff9d8c08198261b0bf4e55f30b71c677c27039d223e5ba9f327a9645c24eb482ea55d128bd79dcc6dd44bbac5c5ca5dae30895ddd6be69fbfc70f1d8bca96956d36ffb9fc1d696ff79c3bdd92e758b24751d426cceca70d83ba4e52d489e1a8cb96565b953ca19b2aacb4795fae9bd642adcfb2fc1229c97838b990825b2aaf3bc5e6f8e", 0xd7}, {&(0x7f0000000240)="1777317db21b9d7439513f1609", 0xd}, {&(0x7f0000001400)="f75db666393d2be3dfc7ad9fe9a1f776a0c6143bff59653a410689fa75bdc6f73f94265868b7cd150b91c612d1e3f504b5269fbe0e4a24a3101a192d1ec3ae3b857115afff6d5f49147756af249667b2389aaafba0d1268b8efa698ed51bb6d27af6e3207c44f3488b3b2af2c65610f4745f62dc4dce20d002b5bc2c15288f64950f942c63233ad297974dcb609b62f7399758ac304b271b0380c44509d557c866c9ae7cd0317a839dd6b01112637028296b95c6240b6590501ecba3f0", 0xbd}, {&(0x7f0000001500)="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", 0xce5}], 0x6}, 0x0) 08:48:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x4, &(0x7f0000000840)=@framed={{}, [@call]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:45 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 08:48:46 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8913, &(0x7f0000000000)) 08:48:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 840.680139][ T9773] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 840.962294][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 841.110019][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 841.127585][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 841.341780][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 841.350932][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.358937][ T9773] usb 6-1: Product: syz [ 841.365892][ T9773] usb 6-1: Manufacturer: syz [ 841.372476][ T9773] usb 6-1: SerialNumber: syz [ 841.388954][ T9773] usb 6-1: config 0 descriptor?? [ 841.448679][ T9773] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 841.459045][ T9773] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 841.649381][T29108] udc-core: couldn't find an available UDC or it's busy [ 841.658030][T29108] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 841.679729][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 841.687560][ T9773] usb 6-1: USB disconnect, device number 34 [ 841.699735][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 841.706727][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 841.716886][ T9773] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:48 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x44) 08:48:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x55, 0x0, 0xb}, 0x0) 08:48:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4}, 0x40) 08:48:48 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x3e80}, 0x0) 08:48:49 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8902, &(0x7f0000000000)) [ 843.759879][T23997] usb 6-1: new high-speed USB device number 35 using dummy_hcd 08:48:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0x0, 0x4}, 0x40) 08:48:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 844.019808][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 844.149625][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 844.168207][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 844.350663][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 844.360899][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.369021][T23997] usb 6-1: Product: syz [ 844.383375][T23997] usb 6-1: Manufacturer: syz [ 844.390828][T23997] usb 6-1: SerialNumber: syz [ 844.398755][T23997] usb 6-1: config 0 descriptor?? [ 844.459136][T23997] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 844.481206][T23997] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 844.661847][T29162] udc-core: couldn't find an available UDC or it's busy [ 844.668982][T29162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 844.691119][ T9773] usb 6-1: USB disconnect, device number 35 [ 844.699792][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 844.716107][ T9773] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:51 executing program 4: bpf$PROG_LOAD(0xa, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 08:48:51 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 08:48:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000200)="7adabf17aa3bce875567e1a0ff040414161d6dc7b55e57ee039be3", 0x1b}, {&(0x7f0000000240)="76106c98d286511dbe635bc5a82007727b65725b49fe5274009d6ecfecebcd80faf575b2863ad26435c4a0e6bb03592ad4a6a6f5ed002b555bb3e3f5ed85861d8a243fe0240ca4b6e6744acc81adc2fedc08dd6a5744183d81f7ae5ee6aa3888e11aefc19154570adcc6ecc0bc85650b1eff7493205b23d7d83eb67346e454934cefc379e513703f9acf", 0x8a}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000005e40)={0x0, 0x0, 0x0}, 0x0) 08:48:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@typedef, @const, @array, @func_proto, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x70}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)={0x5, 0x5, 0x3, 0x209}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 08:48:52 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8904, &(0x7f0000000000)) 08:48:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@typedef, @const, @array, @func_proto, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x70}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:52 executing program 2: bpf$BPF_PROG_DETACH(0xd, &(0x7f0000000bc0)={@map}, 0x10) 08:48:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@typedef, @const, @array, @func_proto, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x70}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:52 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 847.019826][ T22] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 847.319737][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 847.441558][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 847.466166][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 847.650961][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 847.660271][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.668412][ T22] usb 6-1: Product: syz [ 847.674954][ T22] usb 6-1: Manufacturer: syz [ 847.680889][ T22] usb 6-1: SerialNumber: syz [ 847.688932][ T22] usb 6-1: config 0 descriptor?? [ 847.742251][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 847.766294][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input35 [ 847.947942][ T22] usb 6-1: USB disconnect, device number 36 [ 847.954414][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 847.954451][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 847.994745][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 08:48:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:55 executing program 4: socketpair(0x11, 0xa, 0x0, &(0x7f0000000140)) 08:48:55 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x8d) 08:48:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x84}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:55 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)='_', 0x1}], 0x1}, 0x0) close(r0) 08:48:55 executing program 2: bpf$BPF_PROG_DETACH(0x6, &(0x7f0000000bc0)={@map, 0xffffffffffffffff, 0x11}, 0x10) 08:48:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x1, &(0x7f0000000100)=@raw=[@ldst], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x84}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:55 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000031c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000060c0)={0x0, 0x0, &(0x7f0000005f00)=[{0x0, 0x3e80}, {&(0x7f0000005d40)='}', 0x1}], 0x2}, 0x0) 08:48:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x84}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:55 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000540)="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"}, 0x8a7) [ 850.089886][ T9773] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 850.369786][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 850.510156][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 850.529759][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 850.719958][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 850.729271][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.738754][ T9773] usb 6-1: Product: syz [ 850.743897][ T9773] usb 6-1: Manufacturer: syz [ 850.748592][ T9773] usb 6-1: SerialNumber: syz [ 850.757729][ T9773] usb 6-1: config 0 descriptor?? [ 850.815855][ T9773] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 850.833508][ T9773] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 851.020605][ T22] usb 6-1: USB disconnect, device number 37 [ 851.039898][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 851.047248][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:48:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:48:58 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f00000033c0)) 08:48:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x1}]}]}}, &(0x7f0000000180)=""/238, 0x2e, 0xee, 0x1}, 0x20) 08:48:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x1010, 0x0, 0x0, "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"}, {0x100, 0x0, 0x0, "39a5a50603f2bbb4938dfdc5e161aaf12cfe29ab9dc5b155b0f346851afaa3fbd3d37fd24b621f0cc361f4b5b693ae240516c01006f55f966cde240631445557c37da1cd46b1901d4d8d890c663b3dcb23d146604b3ba56a848472f4577fb197f3b6d318c7b1558c5be66230bb9a7bbcf78d198e08d55f6d684966e914df27b0f0b548e90f1a328cd6a6a40b023cc5e929a6cfd07cce41e59b47566dbe1a2575c01b6672fbdb4b1b882a044d9e4a830992fd1d8a56d0e4121fb3f0e773549904cc7bb4b3e32ff091e9340fdbfc317ef1d80ad3b10b451a39ee9cf89b099dd84dc09f769b72435b3a68"}, {0xef8, 0x0, 0x0, "ab5d1d2fc1e8c838929d638241ff4e19d07e87bb0da4ce249aaf7fea35d64e0afb0f60d1495a14527537c6148f8cb82a3b7ccc12e5b9257b0142f9d8de098ab1a4fba3394e078b20857809002ca5fba60a7831d24d0809cabffd7cb90202f28095fe593cf8164d0af9c2d303d298f050d45f55533d344af8445319164912cba635142f5aefcd710d9387d89e557a948aa965398dd218b8d0e381403352bdee840726c40825b13421eb27ef212dad79466c4279c0089cf9213a177c1a7374269bf72d44d1208282fb597eb64cc9cbdfcc4cdef8783c67de5fde0d4ae0079d16e944eab4cb36c09ecdd4add557805104ae88a7699a7c44366ace8a0d95fb095ec29ab81dd28fce12bb9c27ba392bba433d279efc94a0509ecae3064005a59601dc65d97340b70f47ee50528fcb1faec8e52eab9d56db2b61583f1a19442608a4ca642f8053b171138d7af14b6f4a5eb9edd78c366e480c5e6b68396f52f0279cd3cb2288e81d64f7436f650380abbdb6860e93c33b9da2087908236e70c983eda0431ae5704de0301eccc3256478691e8e072acae5ee9ef276245497df94b5110068ce6b6ad128707b4d854f86e5e2da3b1191322b43627c57f331873b5cd317fdcbde37d13fb934ecd80e2f44cbc80182825a5dff6b9c3f7988720dbe2229384816b2c70c576417ce1527f759fa3a29ec90e9f5b608fba9c773a37d5125c137a0f6de1528b5a2baf78535fc09714724e6ed9f06bb1c13d7a5b8b9b1110a0fcc62f0178570e839556a4698b924349528eb1174b46f7135001ff823039a1139e7b6812746a7f3b47822f7b5b58b8781430d2a96b1c4e933fb2bacc128b5500e52654bf4bcf7571044f009cbbbb1523e416d5252dd958deb8891f3ef4f3956fac8b1956e650d95b2f47db0cf37fdfd81ae291c102cca2a735c3160c59b036e031bc38aab6419ed7abe78ee2e54c484905c1c789aa0b872dbf32f78c93e5188d863703a6bcd2a41916d751ac6355ad34d23ec5d203274068ab2793ff2247956966f3797b1b54dcddca9d20061116339b6b3e1ad4f409a250f34fb4f555b4917e8be301254f21a673c1d94ef63c5abfe9e08a3e2709e1dc5aec4f40e024f707e98e31c133171263e9e0e30236f067bdde9dc1940e88fc2d7c69934779078c1c14b7f6cd5c540eb300f03d5cdcd7a84ec16e8705eebc2c3eb2a1f47ac054bb194e643dec548684192fbee975267fb536f934b790447885d48f5da27f649d06047531aa646c69294a5d4dad9e482ba6ee71ee0f75c33c44039f70a3397c9145d06a24c13599c63de3c3d00d623ac35e66228f1f250c019ac254be526b15e8044ec2064273e0182be1d691f63947c49ea0f3f5e7104fea66bcc490a76998837feddc1ed67074391805537a87e3c65569de3752576616197a3ebbf53cd279840a6184bb71caf18b912c2958b81819edc402cf124d0c24580357de39310c6769e217f169cd3821941ded7f99a9c033d471b397f1a66767130ddc27d1896a3312e29a41532f2cb08f5e726ef95ae5b6eea73fbea370f55ca7c48e6dad776794a1fa04624b6de4e74147766a621a57ca90fbdf8b9cd307ecb0485546aa0a751037905633cf63c9189b771979d6021c0b06d05f6703e2c1bfb3604caa6f3d2fce71ccca7cfd5611fa3dab8f5b21902e94c559cdf49af77a90b614c113768ad984b6285f4b58e3ce60db871bd693beef26d0fd2822d8db67a1c960faaa6fb1252e3b5a0e4d8f1f4e0690b3b1ec1c6bb45d08535808bea0977340dbbf3b1680944d869c5a0fe39af22c57a841daa3842fb7b5cc43674672fb650d02cedb6c4044bbff064188f625f3b8f6fc1c7ea59add7fcd0716ea203faf4b48e48688a72da8f27b79eb2a8b6b1172cbefeb96c5019f8b49468df58f7df410ca21af75aebe504b7b8015bba1b4a6447e4e484036fc6da3ef61d3f4ec8994fed91d9252a9b2fa7cc1a8d55dbd5e162eff24224639ac416587f56ef3f553725214c8f3830d1d8b138712e5076dc13f25ce66613cd7bc1a0776c09e28f3f344de167c6e214f9c60835feea82232875bf124cf34800cfba15939fd1193f2e92846f6b006798913237c3ce57259dd4d47c0db13ce4847fdf950d529dbfc4cf4d28a5aa453229f45e85592e8cd8cc9e44a6da1249f9f4878cb67abecbed91f189703c72a0cf03d1e9a07bbf49e49a9ba631380fee950d19598095aa00a47701665de2fb3c0bd260f2350ffaae325c0a0a3d8534e37f1108af3fe5c49a13d71f1813afcfa9be0d3977b1385aadb39674a7f8fa1e65b082dc6c83e0f8e4f3808add8fe47d61c71814363d785f7534db214ab391cc69d3c0c79e6deee7530c6f414c5292ccb5bf3cfa3ef64481236c2131213f1a08727fcddf2d479cac6d18888632dd6ea4cd41eb44f40cc017b22d986e8ea86158cd6c03b9767017f2f6a34f53a640c397a15ee9a721be8e99020e0f7cbf1c3ce1029ec7b951e2a5c8c5c763c9f0d0b2117be3d8577bc7b1d9fa6c9426eef1025d9ff74c2bdeabdbf50dd58743484f0727248161a21fd818ffb3807bced89729ad30090bf1c356b04d4177725115c2c848b99490206b3d36358fd8956be2cf691d19fdd28ea6c3bb457a3a1d66813e4b412895e81a4d88a8ab65994d8741de8e33ed53f64f35f20efc91211bc62af8c9260c1b7587272c7445107455dfc66dffa6454c21c5eb320ee9ce1837d615ff41d934f3459a56c6248c99fcc3215978109086211055f2f38bad607b6301722de13500cd6bb2e3e4ff9d072733d2ea7ac25229d0b0b11e3202de5600f532bd7c3a3a7ef7073361438aa447d27830b6953305bb05f9aebe793ee589416346a1e068cc1a336f9f6b8954d3193ba476bb4db61925495e99f8f333babb8aacc973d058c940b4f0133313a9c57830fefd025a9cfb6f24501cb7b377ea19f2af0e5248022914c99a3d2986250773de4c46cd2374042c3e1370b5788fd4f454a8e3938779ae4f42f2301300f1471d46d8610c5b50953a1c1d74d0c7467499f68bd7f87d512e03f024dfefb1b257e12bbdc1f76307b7bc1934ce07bcd774e98876bb3da8683bb217ad14fbfb2dbc1c2a2241149b33255846fcf5da3c8bbfa0711bdc340948ba4e935a87072a4d3860f7f00bf96d4c47e682a9d836c4dce49088b21161cff8241a41e4e7ef9692771232223fe54e48a30d3ebfa6a0502adeb1b714c5834862e8c5f8ff37a503fb6151ab728486bbe9db4ce7139de60736c1eca1c2d7542af2845a108e53a5b80be6e854f83a71d5292636446d67834a06a069c784a43ec5f13d5959cb72db464c79f8286f6f2a8f2904c8db82eb20ce4feaced6a83c178034f0e705958f3767518a41897b96d496e419a59c6ed1dbeef6ff1da58a21b1148375169cbe3c4de9c7f9f515c4636e212a81380fe2e8369ffef3cf537cd383bfabc14b4d399f0b3ef2664c7ef4588aa7c5823985a554d7b740a8f63991a38060dd5cba4160497d83e7f059eef95cbac23d350e45e2907a1627df5a7bbe1a03c29458625b0ad105ab09ed59e667787e61763d713c07d01afd8061904a09383e26277d9753d9156cc5ddc4da75d86e3d93d9e809d54ef22a30b05cddb5ace5b267f1e9a8b79af681e6a53ee91f73ac51177d1b540bc2ac86a79661e7dd86b5b6ab10a71e3e77cfaa0eef4d72e2f83a3a71cbad4252078aeb192bd6ba5c6f104f925b4338377bee7574a16826734d6489ce995939469e8e826b220d14ed52ef672d5f25cd96afa1e485b46e2f1ca28c7b4d10f39967b876f0c4d3e0eca42317ab704b3f4ad34c0b6f5ca671d21b9a4af6f8c4d8005ebdef189b12e7bbf46187df045615c52cb5b954c8ff5eeecf9b9dffd1f51779d7b63110c4f780e7e4c5f1da0cf040263324d1412c6e080a173cb57d0b7a50729629118edc1ff275cfa1a520e79d29551e5003cb47ba9c8cb28b1dd4724c80c39349b451f7857e36f5510c77854e287b645c551d78691053cdc0a653feaed76c528fd1ba5eca36c69b30d57c493c975d39f3b143181fa994091d6b04ff4f1de6dde4181fd5eca00487a77b839c5990a5428aac8de67b7c812de1f5cc396ea72b4bd561f5ac368d09e84aa28e7b52f469c79a43468d510a610c27c4c4905396693bfd32ecea251d36b3c0e1526d8b694c65d994bc3d3ecc095b134da6d575131acdbe6cdabe4675487b57b2ca2ae8acdd96edf5566a255371368b351ec41dfcb133fd91a84ac71d0378f14cb282460cb33814031ad7beed95ac483312058d2850081b5b7140203d5c87ebc07529ccc59eac36355080436c716a282c4ce66ad6aefa7227ba0cefb0d61d560c7eb1cf07c224ddc63739e8df6c2f520cceb4bb5c6d5df4d76c4457c38c11e8c369e75711327623947cc44c231c2e13af37f387add3650a0dafc47aaff39d415c922c7ce771bff251ddfc99c616ddf5e40f5d846365f334b4dd3d4359312e13935dbd23165fc64257479bea1fad7d959bba0b97a7002c7420ebddef38e7e7c2de70d43772d4e00aa840dc3897ff2eeefa521d1acebc54efc5aee713f928796b63e00219ad4a96bc34e17b266ce996dfe180648321f37c24706178773a41c425f2637eeaeb9260d5e1165db9f739a6056c99c275e0746cae05c8eeb8aa91b9c3f4a35d44d8fb9c148ab718b2f258f7d1e1b83a02cc235c9b4fd16368fe61d2f10730a2fc2f0264b4c7f0b96ade8071bb55dd73c848df7855ed8a2fb9cfc431212c18bff5e190922f3503da4d62dbc9c765cee338c9a75c88b1719cb7c2f3bdd33496d41cdccc2468d654696106627fbb16cedead407aba734349637ad0bc67e96d6a5d8600c7c249512d464d9627f2d466920c958f69ef98fdb512d1b0bade5311e5f6a3f5e1f3deb8390b8784420452c6ddc0f21d4fb8f8297d2d7d3d1fa7aa7196acaec01047017cac29649426096f379d4eaa45f820f7b1e01709305433386e5dd259ede98dbf6bfeb282d8466988e983b71453269093c2cc3b7aefabf98757da252cc2454d006a4206bac106a5066aca18705fa6ba09ee49fe8efa6eb0a99c0ca0e6df631151f1b9f7b6d934ec0810cc4e9fad63fff55d12b8d66e5771be6dd823807c80f37b70c5481c4f7b0c643331a6e845eaaceea1752318aae9c68a3d8f9ba9d675de92d932b409282c1be9201b00abcbd73f4b22e2441a3723b88b39c79de66f645781ab7d3142e6ff0e73b82125baf35dbb99b6968409daa80fb53e4ee91ec7068d8314c10236eddece8d8a056da4775aeb018d7cb3ba7a228460e5f25aa763dd410ad62617f4931a148bb9cf1b0f13b445fcdebaef8396c23a9cccf5c065090b3a773f4ccb36b7aeeacff27af5"}], 0x2008}, 0x0) 08:48:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x84}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:48:58 executing program 4: sendmsg(0xffffffffffffffff, 0x0, 0x7ffc7c03908dcd7f) 08:48:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x84}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:48:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x4, &(0x7f0000000840)=@framed={{}, [@call]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000900)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x3, &(0x7f0000000840)=@framed, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:48:58 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x40, &(0x7f0000000500)=@un=@abs, 0x80) 08:48:58 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000180)) [ 853.209944][T29242] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 853.480975][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 853.641549][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 853.660180][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 853.859904][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 853.869497][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.879831][T29242] usb 6-1: Product: syz [ 853.884029][T29242] usb 6-1: Manufacturer: syz [ 853.888646][T29242] usb 6-1: SerialNumber: syz [ 853.901193][T29242] usb 6-1: config 0 descriptor?? [ 853.952345][T29242] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 853.967213][T29242] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input37 [ 854.165812][ T9666] usb 6-1: USB disconnect, device number 38 [ 854.179722][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 854.186799][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:01 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x81) 08:49:01 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 08:49:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x84}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 08:49:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x100) 08:49:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x10, 0x0) 08:49:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0xee01, 0x0) 08:49:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 856.329813][T23997] usb 6-1: new high-speed USB device number 39 using dummy_hcd 08:49:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) futimesat(r1, &(0x7f0000000480)='./file0\x00', 0x0) 08:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x1) [ 856.589919][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 856.712069][T23997] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 856.727018][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 856.759451][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 856.779808][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 856.799897][T23997] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.889984][T23997] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 856.899073][T23997] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 856.909434][T23997] usb 6-1: Manufacturer: syz [ 856.917579][T23997] usb 6-1: config 0 descriptor?? [ 857.259833][T23997] rc_core: IR keymap rc-hauppauge not found [ 857.266100][T23997] Registered IR keymap rc-empty [ 857.291125][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.339946][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.372318][T23997] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 857.409495][T23997] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 857.449739][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.455886][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.469804][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.489738][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.509750][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.515839][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.529762][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.559091][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.569734][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.575841][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.589758][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.609744][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.629876][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.636081][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.649759][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.669743][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.689755][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.695822][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.709795][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.729726][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.749746][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.755767][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.769755][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.789792][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.809759][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.815701][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.829756][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.849818][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.869818][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.876019][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.889761][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.909751][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.929770][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.935880][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 857.949774][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.969742][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.989821][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 857.995792][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 858.009764][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 858.029956][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 858.037969][T23997] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 858.049721][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 858.061906][T23997] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 858.070502][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 858.088260][T23997] usb 6-1: USB disconnect, device number 39 [ 858.094392][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:49:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x100, 0x0, &(0x7f0000000240)) 08:49:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @const, @array, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:04 executing program 2: open$dir(&(0x7f0000000440)='./file1\x00', 0x642, 0x85) 08:49:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') write$char_usb(r0, 0x0, 0x0) 08:49:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:04 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) 08:49:04 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100) 08:49:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@typedef, @const, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x74}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x440, 0x0) 08:49:04 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0) 08:49:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@typedef, @const, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x74}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 859.450650][ T22] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 859.690957][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 859.819264][ T22] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 859.848227][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 859.872508][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 859.895596][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 859.918205][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 860.020156][ T22] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 860.029402][ T22] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 860.038032][ T22] usb 6-1: Manufacturer: syz [ 860.048982][ T22] usb 6-1: config 0 descriptor?? [ 860.380543][ T22] rc_core: IR keymap rc-hauppauge not found [ 860.386506][ T22] Registered IR keymap rc-empty [ 860.409822][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.459913][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.495632][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 860.520299][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input39 [ 860.559734][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.565704][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.579746][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.599730][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.619724][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.625678][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.639751][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.659736][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.679741][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.685700][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.699769][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.719740][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.739771][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.745831][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.759787][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.779734][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.799744][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.805704][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.819754][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.839725][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.859729][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.865778][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.879757][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.899738][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.919783][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.925736][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.939748][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.959769][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.979753][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 860.985713][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 860.999761][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.019787][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.039812][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.045723][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 861.059749][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.079741][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.099755][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.105729][ T22] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 861.119835][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.139727][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.147053][ T22] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 861.155254][ T22] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 861.163744][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.179743][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 861.196409][ T22] usb 6-1: USB disconnect, device number 40 [ 861.202510][ C1] mceusb 6-1:0.0: Error: urb status = -71 08:49:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:07 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) 08:49:07 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1) 08:49:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@typedef, @const, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x74}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:07 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) 08:49:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x440, 0xc) 08:49:07 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x800, &(0x7f00000000c0)) 08:49:07 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) r0 = geteuid() fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, 0x0, 0x0) 08:49:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 862.559867][ T9773] usb 6-1: new high-speed USB device number 41 using dummy_hcd 08:49:07 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) [ 862.818601][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 862.940555][ T9773] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 862.951322][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 862.973407][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 863.001631][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 863.027379][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.120094][ T9773] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.129560][ T9773] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 863.139085][ T9773] usb 6-1: Manufacturer: syz [ 863.151535][ T9773] usb 6-1: config 0 descriptor?? [ 863.470315][ T9773] rc_core: IR keymap rc-hauppauge not found [ 863.477118][ T9773] Registered IR keymap rc-empty [ 863.499843][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.550014][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.581065][ T9773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 863.599328][ T9773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 863.649730][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.656039][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.669758][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.689737][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.709805][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.716164][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.729791][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.749753][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.769780][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.776251][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.789848][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.809793][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.829766][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.836892][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.849769][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.869854][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.889752][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.896087][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.909763][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.929730][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.949842][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.957671][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 863.969751][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 863.989770][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.009745][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.015933][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 864.029778][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.049814][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.069774][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.076216][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 864.089795][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.109932][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.129789][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.136073][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 864.149779][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.169804][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.189793][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.196252][ T9773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 864.209779][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.229850][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.238568][ T9773] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 864.247195][ T9773] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 864.255706][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 864.264517][ T9773] usb 6-1: USB disconnect, device number 41 [ 864.270753][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:49:10 executing program 2: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') utimes(&(0x7f0000000040)='./file0\x00', 0x0) 08:49:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x9}, 0x40) 08:49:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@typedef, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f00000001c0)) 08:49:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:10 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x6000201) 08:49:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x100) 08:49:10 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000003a40)='./file1\x00', 0x0, 0x1) open$dir(&(0x7f0000000040)='./file1\x00', 0x602, 0x87) 08:49:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 865.679848][ T9666] usb 6-1: new high-speed USB device number 42 using dummy_hcd 08:49:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0xee01, 0x1000) 08:49:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 865.929980][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 866.050583][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 866.085370][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 866.260715][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 866.275536][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.285993][ T9666] usb 6-1: Product: syz [ 866.291405][ T9666] usb 6-1: Manufacturer: syz [ 866.296483][ T9666] usb 6-1: SerialNumber: syz [ 866.306108][ T9666] usb 6-1: config 0 descriptor?? [ 866.352453][ T9666] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 866.378762][ T9666] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input41 [ 866.568126][T29579] udc-core: couldn't find an available UDC or it's busy [ 866.577747][T29579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 866.611250][ T9773] usb 6-1: USB disconnect, device number 42 [ 866.619732][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 866.626831][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 866.644321][ T9773] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:13 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80042, 0x0) 08:49:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0]}}, 0x0, 0x8b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:13 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x0, 0x0) 08:49:13 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:49:13 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000d40)='.\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', r0, &(0x7f0000000d80)='./file0\x00', 0x0) 08:49:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0]}}, 0x0, 0x8b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:14 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x2) 08:49:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x40, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') [ 868.810203][ T9773] usb 6-1: new high-speed USB device number 43 using dummy_hcd 08:49:14 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x2404c005, 0x0, 0xfffffffffffffe2c) 08:49:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0]}}, 0x0, 0x8b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x1000, 0x4, &(0x7f00000001c0)) [ 869.069808][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 869.190695][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 869.223655][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 869.420236][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 869.434616][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.454267][ T9773] usb 6-1: Product: syz [ 869.459564][ T9773] usb 6-1: Manufacturer: syz [ 869.475257][ T9773] usb 6-1: SerialNumber: syz [ 869.488347][ T9773] usb 6-1: config 0 descriptor?? [ 869.534256][ T9773] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 869.547722][ T9773] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input42 [ 869.750054][T29638] udc-core: couldn't find an available UDC or it's busy [ 869.758509][T29638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 869.783327][ T22] usb 6-1: USB disconnect, device number 43 [ 869.799811][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 869.810000][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 869.871737][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.878514][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 08:49:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:16 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000180)='.\x00', 0xe8) 08:49:16 executing program 4: open$dir(&(0x7f0000000440)='./file1\x00', 0x642, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x3) 08:49:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='fdinfo\x00') mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x431cda9bcf5dbff6, r0, 0x0) 08:49:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0]}}, 0x0, 0x8b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0]}}, 0x0, 0x8b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0xee00, 0x0, 0x1000) 08:49:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) 08:49:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, &(0x7f00000000c0)=@pptp, &(0x7f0000000040)=0xffffffffffffff4c) [ 871.953147][ T9738] usb 6-1: new high-speed USB device number 44 using dummy_hcd 08:49:17 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./file1\x00', 0x40, 0x0) 08:49:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0]}}, 0x0, 0x8b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 872.219990][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 872.379874][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 872.399790][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 872.590322][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 872.599522][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.608781][ T9738] usb 6-1: Product: syz [ 872.613198][ T9738] usb 6-1: Manufacturer: syz [ 872.617814][ T9738] usb 6-1: SerialNumber: syz [ 872.629712][ T9738] usb 6-1: config 0 descriptor?? [ 872.682258][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 872.691864][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input43 [ 872.891428][T29698] udc-core: couldn't find an available UDC or it's busy [ 872.898415][T29698] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 872.926600][ T9738] usb 6-1: USB disconnect, device number 44 [ 872.932690][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 872.932730][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 872.970498][ T9738] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x431cda9bcf5dbff6, 0xffffffffffffffff, 0x0) 08:49:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x8041, 0x0) 08:49:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="a1", 0x1, 0x4000, 0x0, 0x0) 08:49:20 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, 0xffffffffffffffff, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:20 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 08:49:20 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 08:49:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:20 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 08:49:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x22) sendto(r0, &(0x7f0000001600)='(', 0x1, 0x0, 0x0, 0x0) [ 875.100809][ T22] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 875.390364][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 875.510646][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 875.521964][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 875.710031][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 875.719294][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.727986][ T22] usb 6-1: Product: syz [ 875.732791][ T22] usb 6-1: Manufacturer: syz [ 875.737565][ T22] usb 6-1: SerialNumber: syz [ 875.761893][ T22] usb 6-1: config 0 descriptor?? [ 875.812103][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 875.829350][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input44 [ 876.017982][T29754] udc-core: couldn't find an available UDC or it's busy [ 876.025025][T29754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 876.045515][ T22] usb 6-1: USB disconnect, device number 45 [ 876.051541][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 876.051583][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 876.097389][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x0) 08:49:23 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000001880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000000240)) 08:49:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) 08:49:23 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, 0xffffffffffffffff, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:23 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x8) 08:49:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:23 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004200)='\x00', 0x1}], 0x1}, 0x0) 08:49:23 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) 08:49:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1}, 0x40) 08:49:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 878.191508][ T9763] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 878.449802][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 878.570706][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 878.595089][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 878.781370][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 878.790619][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.798788][ T9763] usb 6-1: Product: syz [ 878.805268][ T9763] usb 6-1: Manufacturer: syz [ 878.811970][ T9763] usb 6-1: SerialNumber: syz [ 878.831634][ T9763] usb 6-1: config 0 descriptor?? [ 878.872341][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 878.891951][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45 [ 879.078490][T29808] udc-core: couldn't find an available UDC or it's busy [ 879.090761][T29808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 879.111832][ T9666] usb 6-1: USB disconnect, device number 46 [ 879.119728][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 879.126832][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 08:49:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=@file={0x1, './file1\x00'}, 0x6e) 08:49:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 08:49:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:26 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, 0xffffffffffffffff, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0}], 0x1, 0x40c0) 08:49:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000dc0), 0x0, 0x40c0) 08:49:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:26 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) write$FUSE_POLL(r1, 0x0, 0x0) 08:49:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="ad", 0x1, 0x800, &(0x7f0000000080)=@generic={0x0, "df36aa123a370973e571252a7f70974fd7aee77cea6a6cb096674b6c95d6faf769e81b459ef22ede0eefeda76fea52def891bd840a39d12d5d377fb7f373a84248a578422973d9ade9623277a99809e02e07518c59f575a90970b2a8d7f3a8ffa8c0005bb78d23b08ea02df109aa763ac5c3e9f406c6a072a9430855f277"}, 0x80) [ 881.290145][ T9738] usb 6-1: new high-speed USB device number 47 using dummy_hcd 08:49:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 881.549864][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 881.670639][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 881.689950][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 881.859955][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 881.869991][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.878193][ T9738] usb 6-1: Product: syz [ 881.884137][ T9738] usb 6-1: Manufacturer: syz [ 881.888842][ T9738] usb 6-1: SerialNumber: syz [ 881.897424][ T9738] usb 6-1: config 0 descriptor?? [ 881.952560][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 881.971368][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46 [ 882.156877][T29862] udc-core: couldn't find an available UDC or it's busy [ 882.164144][T29862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 882.200167][ T9738] usb 6-1: USB disconnect, device number 47 [ 882.209802][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 882.216875][ T9738] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:29 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x8) 08:49:29 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0xc080) 08:49:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:29 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 08:49:29 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000012c0)=[{{&(0x7f0000000000)=@xdp, 0x80, 0x0}}], 0x1, 0x0) 08:49:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000002200)={0x0, 0x0, 0x0}, 0x1) 08:49:29 executing program 4: wait4(0x0, 0x0, 0x80000002, 0x0) 08:49:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003340), 0x91a24e56b0311410, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, 0x0) 08:49:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 884.519002][ T9738] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 884.769827][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 884.893862][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 884.905260][ T9738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 885.070023][ T9738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 885.079218][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.087476][ T9738] usb 6-1: Product: syz [ 885.091929][ T9738] usb 6-1: Manufacturer: syz [ 885.097470][ T9738] usb 6-1: SerialNumber: syz [ 885.107377][ T9738] usb 6-1: config 0 descriptor?? [ 885.152900][ T9738] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 885.167394][ T9738] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input47 [ 885.355575][T29920] udc-core: couldn't find an available UDC or it's busy [ 885.368188][T29920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 885.386206][ T9666] usb 6-1: USB disconnect, device number 48 [ 885.392255][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 885.392292][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 885.430641][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 08:49:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000900)=@phonet, 0x80) 08:49:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006b40)='comm\x00') io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 08:49:32 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000080)=""/67) 08:49:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:32 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:32 executing program 2: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000022c0)) fork() syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002180)=[{&(0x7f0000002400)="de", 0x1}, {&(0x7f00000024c0)="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", 0xb41}], 0x0, 0x0) 08:49:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:32 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(r0, &(0x7f0000000180)='./file0\x00', 0x1) 08:49:32 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlockall() madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 08:49:32 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001e80)={&(0x7f0000000980)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000001c80)=[{&(0x7f00000009c0)='G', 0x1}, {&(0x7f0000000a40)="b5", 0x1}], 0x2}, 0x0) 08:49:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 887.619771][ T9666] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 887.641088][T29986] loop2: detected capacity change from 0 to 5 [ 887.860075][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 887.980006][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 887.991227][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 888.159934][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 888.179867][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.187917][ T9666] usb 6-1: Product: syz [ 888.197299][ T9666] usb 6-1: Manufacturer: syz [ 888.203302][ T9666] usb 6-1: SerialNumber: syz [ 888.218165][ T9666] usb 6-1: config 0 descriptor?? [ 888.262012][ T9666] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 888.282407][ T9666] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input48 [ 888.467156][T29968] udc-core: couldn't find an available UDC or it's busy [ 888.481593][T29968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 888.506049][ T2939] usb 6-1: USB disconnect, device number 49 [ 888.509745][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 888.519989][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 888.529365][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:49:35 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 08:49:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:35 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:49:35 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:49:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000300)=@in, 0xc, &(0x7f0000000740)=[{&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000480)=""/214, 0xd6}], 0x3, &(0x7f00000007c0)=""/138, 0x8a}, 0x2) sendmsg$unix(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="e370cb119134f7a3561bbbf59ba44a5c42f0d43857285961932b9ceb743f0964e1659cd792ee4475", 0x28}, {&(0x7f0000000140)="6a2c816e8ad57935b3b8b95b44ac8f2021e7fc308c4c097b2d8fac1c63505675bbd38043df2790b079f101baafdefdf67487127e9e8f57cc7d960484b7b7fef0099c95e34989f5b0490e641938a3ed623a6ca8ee4a536268d0baabe86b95aa1d14fd2708d89cdf84e5", 0x69}], 0x2}, 0x0) 08:49:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:35 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1011, r0, 0x0) 08:49:35 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) dup2(r0, r1) utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x8, 0xdbaf}, {0x9862, 0x1}}, 0x0) accept$unix(r2, 0x0, &(0x7f0000000240)) 08:49:36 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 08:49:36 executing program 0: r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) [ 890.890141][ T9773] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 891.150188][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 891.269957][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 891.281042][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 891.450003][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 891.459144][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.467340][ T9773] usb 6-1: Product: syz [ 891.471984][ T9773] usb 6-1: Manufacturer: syz [ 891.476601][ T9773] usb 6-1: SerialNumber: syz [ 891.484468][ T9773] usb 6-1: config 0 descriptor?? [ 891.522117][ T9773] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 891.532246][ T9773] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input49 [ 891.727897][T30039] udc-core: couldn't find an available UDC or it's busy [ 891.735058][T30039] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 891.759290][ T22] usb 6-1: USB disconnect, device number 50 [ 891.759734][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 891.772775][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:49:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:38 executing program 4: semget(0x0, 0x0, 0x200) 08:49:38 executing program 2: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) dup2(r0, r1) 08:49:38 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x1000bf7, 0x4) 08:49:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:38 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000280)={@local, @local, @val, {@ipv4}}, 0x0) 08:49:39 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x2) 08:49:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:39 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000080), 0x4) 08:49:39 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='.\x00', 0x0) 08:49:39 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) [ 893.939950][ T2939] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 894.239760][ T2939] usb 6-1: Using ep0 maxpacket: 16 [ 894.379876][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 894.403129][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 894.590104][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 894.599227][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.608921][ T2939] usb 6-1: Product: syz [ 894.614319][ T2939] usb 6-1: Manufacturer: syz [ 894.619560][ T2939] usb 6-1: SerialNumber: syz [ 894.627971][ T2939] usb 6-1: config 0 descriptor?? [ 894.692241][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 894.706969][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input50 [ 894.896136][T30092] udc-core: couldn't find an available UDC or it's busy [ 894.903636][T30092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 894.925645][ T9763] usb 6-1: USB disconnect, device number 51 [ 894.949720][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 894.956953][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:49:42 executing program 4: fchmodat(0xffffffffffffffff, 0x0, 0x0) 08:49:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:42 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[{0x10}], 0x10}, 0x0) 08:49:42 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 08:49:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:42 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 08:49:42 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:49:42 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000180), 0x4) 08:49:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:42 executing program 0: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:49:42 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect(r0, 0x0, 0x0) [ 897.080420][ T22] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 897.339864][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 897.470137][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 897.499822][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 897.690786][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 897.700036][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.708282][ T22] usb 6-1: Product: syz [ 897.715065][ T22] usb 6-1: Manufacturer: syz [ 897.721306][ T22] usb 6-1: SerialNumber: syz [ 897.741740][ T22] usb 6-1: config 0 descriptor?? [ 897.782205][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 897.798816][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input51 [ 897.988033][T30145] udc-core: couldn't find an available UDC or it's busy [ 897.995242][T30145] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 898.015822][ T9666] usb 6-1: USB disconnect, device number 52 [ 898.029924][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 898.036957][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:49:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1}, 0x0) r2 = dup2(r1, r0) sendmsg$unix(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 08:49:45 executing program 2: syz_emit_ethernet(0x52, &(0x7f0000000080)={@random="5926693bd0bf", @remote, @val, {@ipv4}}, 0x0) 08:49:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:45 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @val, {@ipv6}}, 0x0) 08:49:45 executing program 2: syz_emit_ethernet(0x15d, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:49:45 executing program 4: syz_emit_ethernet(0x7c, &(0x7f0000000040)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:49:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:45 executing program 4: accept$inet6(0xffffffffffffffff, &(0x7f0000001700), 0x0) 08:49:45 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000280)={@broadcast, @empty, @val, {@ipv6}}, 0x0) [ 900.170073][ T9666] usb 6-1: new high-speed USB device number 53 using dummy_hcd 08:49:45 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv4}}, 0x0) [ 900.440040][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 900.560802][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 900.593641][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 900.796657][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 900.819287][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.862189][ T9666] usb 6-1: Product: syz [ 900.878825][ T9666] usb 6-1: Manufacturer: syz [ 900.889168][ T9666] usb 6-1: SerialNumber: syz [ 900.905898][ T9666] usb 6-1: config 0 descriptor?? [ 900.962059][ T9666] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 900.977079][ T9666] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input52 [ 901.175834][T30202] udc-core: couldn't find an available UDC or it's busy [ 901.191794][T30202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 901.216261][ T9763] usb 6-1: USB disconnect, device number 53 [ 901.229871][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 901.236941][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:49:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:48 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xfffffffffffffffe}}, 0x0) 08:49:48 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), 0x10) 08:49:48 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), 0x4) 08:49:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x10, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:48 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:49:48 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000080), 0x4) 08:49:48 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000001300), 0x2, 0x0, 0x0) 08:49:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:48 executing program 2: open(&(0x7f00000003c0)='./file0\x00', 0x8e321f27d92a5ee0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') [ 903.303055][ T9763] usb 6-1: new high-speed USB device number 54 using dummy_hcd 08:49:48 executing program 4: open$dir(&(0x7f0000000440)='./file1\x00', 0x642, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x25) [ 903.589929][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 903.720125][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 903.739772][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 903.920737][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 903.929945][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.938886][ T9763] usb 6-1: Product: syz [ 903.945987][ T9763] usb 6-1: Manufacturer: syz [ 903.955898][ T9763] usb 6-1: SerialNumber: syz [ 903.971113][ T9763] usb 6-1: config 0 descriptor?? [ 904.023029][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 904.044786][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input53 [ 904.228282][T30263] udc-core: couldn't find an available UDC or it's busy [ 904.250431][T30263] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 904.272842][ T9763] usb 6-1: USB disconnect, device number 54 [ 904.299733][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 904.306819][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0004a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebdead9ef84fa6362e1c6b", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:49:51 executing program 0: select(0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0) 08:49:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:51 executing program 2: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @val, {@ipv6}}, 0x0) 08:49:51 executing program 4: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) 08:49:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x10, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:51 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="184aef2f074a", @val, {@ipv4}}, 0x0) 08:49:51 executing program 2: utimes(0x0, &(0x7f0000000100)) 08:49:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:51 executing program 0: open(&(0x7f00000003c0)='./file0\x00', 0x8e321f27d92a5ee0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:49:51 executing program 4: accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0xfffffffffffffffe) 08:49:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 906.449595][ T9666] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 906.748581][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 906.891133][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 906.916767][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 907.101850][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 907.112005][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.122053][ T9666] usb 6-1: Product: syz [ 907.126235][ T9666] usb 6-1: Manufacturer: syz [ 907.131359][ T9666] usb 6-1: SerialNumber: syz [ 907.137864][ T9666] usb 6-1: config 0 descriptor?? [ 907.182184][ T9666] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 907.206392][ T9666] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input54 [ 907.389311][T30319] udc-core: couldn't find an available UDC or it's busy [ 907.396478][T30319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 907.425835][ T9666] usb 6-1: USB disconnect, device number 55 [ 907.449743][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 907.456895][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:54 executing program 2: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 08:49:54 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x2) getsockname(r0, 0x0, &(0x7f0000000080)) 08:49:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 08:49:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 08:49:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x10, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:49:54 executing program 3: semget(0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/102400) 08:49:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x7}, 0x40) 08:49:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 08:49:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 08:49:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000200)=""/162, 0x1000000, 0xa2, 0x1}, 0x20) 08:49:54 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) 08:49:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x138}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:49:55 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f00000000c0)) [ 909.632161][ T22] usb 6-1: new high-speed USB device number 56 using dummy_hcd 08:49:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002780), 0x42200, 0x0) close(r0) 08:49:55 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6erspan0\x00'}) 08:49:55 executing program 3: socketpair$unix(0xa, 0x3, 0x0, &(0x7f0000000100)) [ 909.900398][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 910.030718][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 910.049606][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 910.250542][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 910.266924][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.297642][ T22] usb 6-1: Product: syz [ 910.309634][ T22] usb 6-1: Manufacturer: syz [ 910.323755][ T22] usb 6-1: SerialNumber: syz [ 910.345220][ T22] usb 6-1: config 0 descriptor?? [ 910.401190][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 910.409229][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input55 [ 910.606435][T30379] udc-core: couldn't find an available UDC or it's busy [ 910.619957][T30379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 910.651427][ T22] usb 6-1: USB disconnect, device number 56 [ 910.669870][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 910.678204][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:49:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x11, 0x4, 0x4, 0x6, 0x4}, 0x40) 08:49:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x400454cc, 0x0) 08:49:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x7, 0x0, 0x0, 0x401}, 0x40) 08:49:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 08:49:57 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, 0xffffffffffffffff, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:49:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "bb"}]}}, &(0x7f0000000200)=""/162, 0x2a, 0xa2, 0x1}, 0x20) 08:49:57 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) 08:49:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/162, 0x29, 0xa2, 0x1}, 0x20) 08:49:57 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x141a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x8}, 0x20) 08:49:58 executing program 2: perf_event_open$cgroup(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:49:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 912.833427][T30481] BPF:[1] ENUM (anon) [ 912.843800][T30481] BPF:size=0 vlen=0 [ 912.857232][T30481] BPF: [ 912.868588][T30481] BPF:Unexpected size [ 912.879095][T30481] BPF: 08:49:58 executing program 3: socketpair(0x2b, 0x0, 0x0, &(0x7f0000001bc0)) [ 912.879095][T30481] [ 912.889881][ T9773] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 912.904741][T30481] BPF:[1] ENUM (anon) [ 912.927695][T30481] BPF:size=0 vlen=0 08:49:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3f, 0x0, 0x0, 0x0, 0xa52}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 912.953268][T30481] BPF: [ 912.997883][T30481] BPF:Unexpected size [ 913.024335][T30481] BPF: [ 913.024335][T30481] [ 913.129924][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 913.250724][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 913.271967][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 913.440659][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 913.454859][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.474717][ T9773] usb 6-1: Product: syz [ 913.480805][ T9773] usb 6-1: Manufacturer: syz [ 913.485697][ T9773] usb 6-1: SerialNumber: syz [ 913.502135][ T9773] usb 6-1: config 0 descriptor?? [ 913.544364][ T9773] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 913.552980][ T9773] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input56 [ 913.757319][T30470] udc-core: couldn't find an available UDC or it's busy [ 913.772436][T30470] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 913.796167][ T22] usb 6-1: USB disconnect, device number 57 [ 913.809835][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 913.816876][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:50:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 08:50:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) 08:50:00 executing program 2: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000003a40)) 08:50:00 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:00 executing program 3: socketpair(0x10, 0x3, 0x1, &(0x7f0000000300)) 08:50:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, 0xffffffffffffffff, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:50:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.controllers\x00', 0x700, 0x0) 08:50:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000002d80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst, @map_val, @map, @generic, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x89a0, 0xffffffffffffffff) 08:50:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000200)=""/162, 0x26, 0xa2, 0x8}, 0x20) 08:50:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.controllers\x00', 0x700, 0x0) [ 916.009989][T29242] usb 6-1: new high-speed USB device number 58 using dummy_hcd 08:50:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa000000}]}]}}, &(0x7f0000000440)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 916.159045][T30549] BPF:[1] FUNC (anon) [ 916.186671][T30549] BPF:type_id=0 [ 916.202702][T30549] BPF: [ 916.217404][T30549] BPF:Invalid name [ 916.237245][T30549] BPF: [ 916.237245][T30549] [ 916.254192][T30549] BPF:[1] FUNC (anon) [ 916.263920][T30549] BPF:type_id=0 [ 916.270217][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 916.277215][T30549] BPF: [ 916.291296][T30549] BPF:Invalid name [ 916.307311][T30549] BPF: [ 916.307311][T30549] [ 916.390623][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 916.415463][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 916.590031][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 916.599146][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.624483][T29242] usb 6-1: Product: syz [ 916.628733][T29242] usb 6-1: Manufacturer: syz [ 916.636534][T29242] usb 6-1: SerialNumber: syz [ 916.645852][T29242] usb 6-1: config 0 descriptor?? [ 916.692366][T29242] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 916.720826][T29242] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input57 [ 916.897883][T30521] udc-core: couldn't find an available UDC or it's busy [ 916.911124][T30521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 916.948793][T29242] usb 6-1: USB disconnect, device number 58 [ 916.955030][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 916.955078][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 916.998418][T29242] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:50:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)) 08:50:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x7911, 0x0, 0x1}, 0x2d) 08:50:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'dummy0\x00', @remote}) 08:50:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 08:50:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x16, 0x7fffffff, 0x0, 0x3, 0x0, 0x1}, 0x40) 08:50:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, 0xffffffffffffffff, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:50:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 08:50:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x4, 0x4}]}]}}, &(0x7f0000000440)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 08:50:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x2}, 0x40) 08:50:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000018480)={&(0x7f0000018300)=ANY=[@ANYBLOB="9feb0100630000000000000060"], &(0x7f0000018380)=""/247, 0x7e, 0xf7, 0x1}, 0x20) 08:50:04 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:04 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc008240a, 0x0) [ 919.129932][T29242] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 919.392734][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 919.530698][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 919.560619][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 919.782258][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 919.811653][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.849984][T29242] usb 6-1: Product: syz [ 919.870367][T29242] usb 6-1: Manufacturer: syz [ 919.882390][T29242] usb 6-1: SerialNumber: syz [ 919.896314][T29242] usb 6-1: config 0 descriptor?? [ 919.962602][T29242] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 919.988126][T29242] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input58 [ 920.168126][T30583] udc-core: couldn't find an available UDC or it's busy [ 920.183550][T30583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 920.224855][T29242] usb 6-1: USB disconnect, device number 59 [ 920.231028][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 920.231067][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 920.296571][T29242] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:50:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)) 08:50:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000240)={'virt_wifi0\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'tunl0\x00'}) socketpair(0x1d, 0x2, 0x0, &(0x7f0000001bc0)) ioctl$SIOCSIFHWADDR(r0, 0x400454d0, &(0x7f0000000000)={'dummy0\x00', @remote}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x36000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip6gre0\x00'}) 08:50:07 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x8}, 0x20) close(r0) 08:50:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000940)={0xf}, 0x40) 08:50:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x80086301, 0x0) 08:50:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) 08:50:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 922.064505][T30647] can: request_module (can-proto-0) failed. [ 922.128912][T30647] can: request_module (can-proto-0) failed. 08:50:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x80086301, 0x0) 08:50:07 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 08:50:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x30}]}}, &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x8}, 0x20) [ 922.290038][ T22] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 922.336489][T30687] BPF:[1] VOLATILE (anon) [ 922.348158][T30687] BPF:type_id=48 [ 922.379947][T30687] BPF: [ 922.395520][T30687] BPF:Invalid type_id 08:50:07 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 922.421639][T30687] BPF: [ 922.421639][T30687] [ 922.454561][T30687] BPF:[1] VOLATILE (anon) [ 922.474737][T30687] BPF:type_id=48 [ 922.498596][T30687] BPF: [ 922.511694][T30687] BPF:Invalid type_id [ 922.529536][T30687] BPF: [ 922.529536][T30687] [ 922.539912][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 922.659918][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 922.672132][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 922.859920][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 922.869026][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.899789][ T22] usb 6-1: Product: syz [ 922.904029][ T22] usb 6-1: Manufacturer: syz [ 922.908825][ T22] usb 6-1: SerialNumber: syz [ 922.932219][ T22] usb 6-1: config 0 descriptor?? [ 922.972371][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 922.998289][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input59 [ 923.178311][T30653] udc-core: couldn't find an available UDC or it's busy [ 923.185905][T30653] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 923.219797][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 923.220082][ T9773] usb 6-1: USB disconnect, device number 60 [ 923.226803][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 923.269265][ T9773] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:50:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)) 08:50:10 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:50:10 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:50:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/162, 0x29, 0xa2, 0x1}, 0x20) 08:50:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8001, 0xc002, 0x8}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f000000b800)={0x0, 0x0, &(0x7f000000b680)=[{0x0}, {&(0x7f000000b180)=""/248, 0xf8}, {&(0x7f000000b280)=""/198, 0xc6}, {&(0x7f000000b380)=""/231, 0xe7}, {0x0}, {&(0x7f000000b580)=""/242, 0xf2}], 0x6, &(0x7f000000b700)=""/240, 0xf0}, 0x2001) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x1d, r2, 0x8, &(0x7f0000000240)={0x6, 0x20003}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff}, 0x78) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x121a, r0, 0x0, '\x00', 0x0, r1, 0x2, 0x0, 0x5}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:50:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d9e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6d, 0x20, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1d, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:50:10 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0}, 0x20) 08:50:10 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:50:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8001, 0xc002, 0x8}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f000000b800)={0x0, 0x0, &(0x7f000000b680)=[{0x0}, {&(0x7f000000b180)=""/248, 0xf8}, {&(0x7f000000b280)=""/198, 0xc6}, {&(0x7f000000b380)=""/231, 0xe7}, {0x0}, {&(0x7f000000b580)=""/242, 0xf2}], 0x6, &(0x7f000000b700)=""/240, 0xf0}, 0x2001) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x1d, r2, 0x8, &(0x7f0000000240)={0x6, 0x20003}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff}, 0x78) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x121a, r0, 0x0, '\x00', 0x0, r1, 0x2, 0x0, 0x5}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 925.330767][ T22] usb 6-1: new high-speed USB device number 61 using dummy_hcd 08:50:10 executing program 4: socketpair(0x14, 0x0, 0x0, &(0x7f0000001bc0)) 08:50:10 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 925.599908][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 925.720803][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 925.743914][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 925.938947][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 925.948360][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.968107][ T22] usb 6-1: Product: syz [ 925.974262][ T22] usb 6-1: Manufacturer: syz [ 925.979041][ T22] usb 6-1: SerialNumber: syz [ 925.995714][ T22] usb 6-1: config 0 descriptor?? [ 926.042197][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 926.051540][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input60 [ 926.247999][T30725] udc-core: couldn't find an available UDC or it's busy [ 926.277475][T30725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 926.316061][ T9738] usb 6-1: USB disconnect, device number 61 [ 926.319841][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 926.338518][ T9738] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:50:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 08:50:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0), &(0x7f00000001c0)=""/145}, 0x20) 08:50:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x8}, 0x20) 08:50:13 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x1, 0x0, 0x0, 0x1d, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x2) 08:50:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8001, 0xc002, 0x8}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f000000b800)={0x0, 0x0, &(0x7f000000b680)=[{0x0}, {&(0x7f000000b180)=""/248, 0xf8}, {&(0x7f000000b280)=""/198, 0xc6}, {&(0x7f000000b380)=""/231, 0xe7}, {0x0}, {&(0x7f000000b580)=""/242, 0xf2}], 0x6, &(0x7f000000b700)=""/240, 0xf0}, 0x2001) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x1d, r2, 0x8, &(0x7f0000000240)={0x6, 0x20003}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff}, 0x78) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x121a, r0, 0x0, '\x00', 0x0, r1, 0x2, 0x0, 0x5}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:50:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) [ 928.189371][T30787] BPF:[1] PTR (anon) [ 928.209929][T30787] BPF:type_id=2 [ 928.233895][T30787] BPF: [ 928.245329][T30787] BPF:Invalid type_id [ 928.269314][T30787] BPF: [ 928.269314][T30787] [ 928.328115][T30787] BPF:[1] PTR (anon) [ 928.347658][T30787] BPF:type_id=2 08:50:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) 08:50:13 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:50:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:13 executing program 4: socketpair(0x1d, 0x0, 0x7, &(0x7f0000000300)) [ 928.396449][T30787] BPF: [ 928.412574][T30787] BPF:Invalid type_id [ 928.418214][T30787] BPF: [ 928.418214][T30787] [ 928.509985][ T22] usb 6-1: new high-speed USB device number 62 using dummy_hcd 08:50:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/4096, 0x27, 0x1000, 0x8}, 0x20) 08:50:14 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 928.749896][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 928.754457][T30820] BPF:[1] UNION . [ 928.766503][T30820] BPF:size=0 vlen=0 [ 928.777718][T30820] BPF: [ 928.787823][T30820] BPF:Invalid name [ 928.798085][T30820] BPF: [ 928.798085][T30820] [ 928.814413][T30820] BPF:[1] UNION . [ 928.825974][T30820] BPF:size=0 vlen=0 [ 928.843153][T30820] BPF: [ 928.845979][T30820] BPF:Invalid name [ 928.854410][T30820] BPF: [ 928.854410][T30820] [ 928.885034][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 928.898606][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 929.070801][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 929.084980][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.105080][ T22] usb 6-1: Product: syz [ 929.114837][ T22] usb 6-1: Manufacturer: syz [ 929.125674][ T22] usb 6-1: SerialNumber: syz [ 929.137162][ T22] usb 6-1: config 0 descriptor?? [ 929.202036][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 929.219220][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input61 [ 929.417742][T30789] udc-core: couldn't find an available UDC or it's busy [ 929.424933][T30789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 929.468899][ T9666] usb 6-1: USB disconnect, device number 62 [ 929.479745][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 929.487153][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:50:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 08:50:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x7, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x30, 0x5}, 0x0) 08:50:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000000200)=""/162, 0x26, 0xa2, 0x1}, 0x20) 08:50:16 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00'}) 08:50:16 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f00000003c0)) 08:50:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) [ 931.311909][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.318327][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 08:50:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x8982, 0xffffffffffffffff) 08:50:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x48000000}]}}, &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 08:50:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x8912, 0xffffffffffffffff) 08:50:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x10001}, 0x40) 08:50:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2, &(0x7f0000000040)=@raw=[@alu={0x4}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 931.649784][ T9763] usb 6-1: new high-speed USB device number 63 using dummy_hcd 08:50:17 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'ip6_vti0\x00'}) [ 931.899795][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 932.020749][ T9763] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 932.049764][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 932.094793][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 932.115520][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 932.130330][ T9763] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.220617][ T9763] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 932.230154][ T9763] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 932.238476][ T9763] usb 6-1: Manufacturer: syz [ 932.249144][ T9763] usb 6-1: config 0 descriptor?? [ 932.592978][ T9763] rc_core: IR keymap rc-hauppauge not found [ 932.598928][ T9763] Registered IR keymap rc-empty [ 932.619833][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 932.670199][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 932.708809][ T9763] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 932.725084][ T9763] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input62 [ 932.769756][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.775985][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 932.789765][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.809753][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.829890][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.836105][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 932.849789][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.869755][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.889791][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.895846][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 932.909775][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.929762][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.949818][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.955842][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 932.969782][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 932.989959][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.009756][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.015779][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 933.029766][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.049744][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.069779][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.075811][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 933.089784][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.109748][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.129781][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.135725][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 933.149836][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.169788][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.189801][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.195797][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 933.209800][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.229916][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.249826][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.255830][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 933.269770][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.289753][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.309826][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.315935][ T9763] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 933.329762][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.349767][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.356980][ T9763] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 933.365197][ T9763] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 933.373708][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.389778][ C1] mceusb 6-1:0.0: Error: urb status = -71 [ 933.398478][ T9763] usb 6-1: USB disconnect, device number 63 08:50:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@typedef, @const, @array, @func_proto, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @typedef, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0x8c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 08:50:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x80108906, 0xffffffffffffffff) 08:50:19 executing program 3: syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) 08:50:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004880)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1340, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x5b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x378, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x36c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xae}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}, {0x578, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xce}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x65c, 0x5, 0x0, 0x1, [{0x404, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x108, 0x5, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x3c4, 0x5, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}]}]}, 0x1ec4}}, 0x0) 08:50:19 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'ip6_vti0\x00'}) 08:50:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3c, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000440)="bda683581041e0e90960e7a8290a58b7d0900982b6667acc1148005b594db5834fe972c69931df001e7fa6", 0x2b}], 0x1}, 0x0) 08:50:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="d6", 0x1}, {&(0x7f0000000140)="1d", 0x1}, {&(0x7f0000000180)="9e", 0x1}], 0x3, &(0x7f0000000240)=[@dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@generic={0x0, 0x7, "9890f3988555c7"}]}}}], 0x28}, 0x0) 08:50:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x11, 0x65, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="318ec2c3d6846224d02d174b502a8b4d1da529447d78b0c9e11279990fd8acd4717bfe7c6f129d41f7def59f7408ba97d4a107ccf501303b562bce40fc19ea21f19bc720eaaf082313f5e274825414590a6c4eb219", 0x55}, {&(0x7f0000000200)="adac1b34d22d8b010e3a881709a598a93fc43ea0e2466d2f96974d428bbd5d", 0x1f}, {&(0x7f0000000240)="292669aec1683a214ea175fbbd2b4e4483be7a57abffa231e1c57ebc09f12e76f22a8863ef01e7b8c4578269c5e57a503faeb0db4bb1551c0f7a9feaf562774bd60fdc9cd8bbb58212bc7db8284a1e4e3e70f70851e231373d13123dae4e50dd437685c3ef36922fa5a63e48eb1e9acd0fadd2b6a9a09222b4239050c6e0b28e33cefdbfeb7b45ae59ba766e8efe42b9198c9791718582fde3364d34bfda4b4c33eb2fc31ec74457ec14dea84d78ebc28fc7d38e078df837fc1bca62e1860de8842d770b739f864462935f78ad67559168b4f7515865f4801edf07908d", 0xdd}, {&(0x7f0000000440)="bda683581041e0e90960e7a8290a58", 0xf}], 0x4}, 0x0) [ 934.789983][ T9666] usb 6-1: new high-speed USB device number 64 using dummy_hcd 08:50:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 935.049951][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 935.170593][ T9666] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 935.189401][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 935.211947][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 935.239930][ T9666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 935.265109][ T9666] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.369993][ T9666] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 935.394276][ T9666] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 935.418658][ T9666] usb 6-1: Manufacturer: syz [ 935.437766][ T9666] usb 6-1: config 0 descriptor?? [ 935.769931][ T9666] rc_core: IR keymap rc-hauppauge not found [ 935.776197][ T9666] Registered IR keymap rc-empty [ 935.799854][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 935.849947][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 935.880435][ T9666] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 935.897932][ T9666] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input63 [ 935.939774][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 935.946076][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 935.959775][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 935.979817][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 935.999782][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.005872][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.019769][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.039852][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.059760][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.065727][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.079764][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.099765][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.119748][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.125762][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.139805][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.159770][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.179745][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.185695][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.199766][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.219748][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.239795][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.245852][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.259763][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.279809][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.299814][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.305749][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.319766][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.339773][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.359749][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.366047][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.379771][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.399749][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.419782][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.425800][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.439763][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.459776][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.479749][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.485739][ T9666] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 936.499759][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.519746][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.526924][ T9666] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 936.535113][ T9666] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 936.543595][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.559739][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 936.579379][ T9666] usb 6-1: USB disconnect, device number 64 [ 936.585438][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:50:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="c8", 0x1}], 0x1, &(0x7f0000000280)=[@hopopts={{0x18}}, @rthdr={{0x18}}], 0x30}, 0x8000) 08:50:22 executing program 3: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0xffffff69) 08:50:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000140)="85", 0x1}], 0x3}, 0x0) 08:50:22 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@private1}, 0x14) 08:50:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x11, 0x64, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) [ 937.682920][T30992] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:50:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x5, &(0x7f0000000040)=@raw=[@jmp, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, @map], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:23 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 08:50:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1c, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:23 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="ec", &(0x7f00000001c0)}, 0x48) 08:50:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001980)={&(0x7f0000000680)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}, 0x0) 08:50:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x11, 0xa, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) [ 937.959949][T23997] usb 6-1: new high-speed USB device number 65 using dummy_hcd 08:50:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x200, 0x4) 08:50:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4a, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts={{0x18}}], 0x18}, 0x0) 08:50:23 executing program 1: r0 = socket(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) [ 938.209983][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 938.331128][T23997] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 938.369869][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 938.401050][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 938.439348][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 938.486947][T23997] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.608362][T23997] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 938.618341][T23997] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 938.636992][T23997] usb 6-1: Manufacturer: syz [ 938.645320][T23997] usb 6-1: config 0 descriptor?? [ 939.019830][T23997] rc_core: IR keymap rc-hauppauge not found [ 939.025939][T23997] Registered IR keymap rc-empty [ 939.049991][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.102075][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.137098][T23997] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 939.155119][T23997] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input64 [ 939.199754][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.205903][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.219746][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.239754][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.259767][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.265916][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.279762][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.299785][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.319838][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.325914][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.339775][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.359766][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.379751][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.385821][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.399771][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.419752][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:50:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:24 executing program 0: openat$cgroup_int(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) 08:50:24 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:50:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=@ipv4_newrule={0xfffffffffffffeb5}, 0x1c}}, 0x0) 08:50:24 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000280)) 08:50:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) [ 939.439761][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.445916][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.459758][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.479754][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.499739][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.505781][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.519779][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.539760][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.559735][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.565771][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.579767][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.599745][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.619743][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.625719][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.639761][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.659756][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.679758][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.685878][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.699755][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.719746][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:50:25 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) 08:50:25 executing program 4: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40051) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040) 08:50:25 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) [ 939.739734][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.745670][T23997] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 939.759767][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.779743][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:50:25 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x1000000, 0x4) 08:50:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x500}, 0x0) [ 939.786935][T23997] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 939.795935][T23997] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 939.804424][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.819744][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.839760][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.859742][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.879762][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 939.886178][T23997] usb 6-1: USB disconnect, device number 65 [ 939.899760][ C0] mceusb 6-1:0.0: Error: urb status = -71 08:50:25 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1001000, 0x4) [ 940.359827][T23997] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 940.599844][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 940.719871][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 940.900613][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 940.930082][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.938375][T23997] usb 6-1: Product: syz [ 940.952233][T23997] usb 6-1: Manufacturer: syz [ 940.956902][T23997] usb 6-1: SerialNumber: syz [ 940.975728][T23997] usb 6-1: config 0 descriptor?? [ 941.022485][T23997] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 941.226583][T31051] udc-core: couldn't find an available UDC or it's busy [ 941.233785][T31051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 941.257486][T29242] usb 6-1: USB disconnect, device number 66 08:50:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x1003}, 0x40) 08:50:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x21, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:27 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:27 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2b, 0x5}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000004800)={@private0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 08:50:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000140)="94", 0x1, 0x0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 08:50:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x68}, 0x40) 08:50:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8}, 0x40) 08:50:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x590) 08:50:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x30, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:27 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000200)) [ 942.372382][T23997] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 942.649792][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 942.799999][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 942.981793][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 942.991156][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.999229][T23997] usb 6-1: Product: syz [ 943.005613][T23997] usb 6-1: Manufacturer: syz [ 943.010948][T23997] usb 6-1: SerialNumber: syz [ 943.027967][T23997] usb 6-1: config 0 descriptor?? [ 943.082863][T23997] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 943.288806][T31114] udc-core: couldn't find an available UDC or it's busy [ 943.295978][T31114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 943.316635][T29242] usb 6-1: USB disconnect, device number 67 08:50:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hoplimit={{0x14}}], 0x18}, 0x0) 08:50:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="318ec2c3d6846224d02d174b502a8b4d1da529447d78b0c9e11279990fd8acd4717bfe7c6f129d41f7def59f7408ba97d4a107ccf501303b562bce40fc19ea21f19bc720eaaf082313f5e274825414590a6c4eb219167b595ab0f10d3dec6daf8275cee24d5506d560d514ea2224d73c0b7008c92a09cc26405a2f83cc7d535d885c71ffaca9be80a021c072c34c41ff391e60bc41cd87661449ccd723ac00d66f5139897ee826b464d1535c34", 0xad}, {&(0x7f0000000200)="adac1b34d22d8b010e3a881709a598a93fc43ea0e2466d2f96974d", 0x1b}, {&(0x7f0000000440)="bda683581041e0e90960e7a8290a58b7d0900982b6667acc1148005b594db5834fe972c69931df001e7fa6", 0x2b}], 0x3}, 0x0) 08:50:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, 0x0}, 0x0) 08:50:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:29 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240), 0x8) 08:50:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000080)) 08:50:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x2, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x128, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @loopback, [], [], 'veth0_vlan\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast2, @private1, [], [], 'ip6erspan0\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 08:50:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:29 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000a00)={0x2}, 0x10) 08:50:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x16, 0x0, 0x0) 08:50:29 executing program 3: clock_gettime(0x3, &(0x7f0000000300)) [ 944.280287][ T9763] usb 6-1: new high-speed USB device number 68 using dummy_hcd 08:50:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) 08:50:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000080)=@raw=[@ldst], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x71, &(0x7f0000000100)=""/113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 944.560019][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 944.680082][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 944.879157][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 944.888767][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.909131][ T9763] usb 6-1: Product: syz [ 944.917353][ T9763] usb 6-1: Manufacturer: syz [ 944.930199][ T9763] usb 6-1: SerialNumber: syz [ 944.952188][ T9763] usb 6-1: config 0 descriptor?? [ 945.012863][ T9763] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 945.228984][T31158] udc-core: couldn't find an available UDC or it's busy [ 945.237919][T31158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 945.264945][ T9773] usb 6-1: USB disconnect, device number 68 08:50:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000080)=@raw=[@ldst], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:31 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7}, 0x8) 08:50:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:50:31 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:31 executing program 0: r0 = socket(0x18, 0x0, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) 08:50:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0xfffffffffffffffc) 08:50:31 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) 08:50:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x288, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x650, 0x650, 0x650, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'ip6erspan0\x00', 'nr0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg2\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 08:50:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80086601, 0x0) 08:50:31 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 946.229838][T23997] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 946.509871][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 946.640635][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 946.810221][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 946.819379][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.828841][T23997] usb 6-1: Product: syz [ 946.834048][T23997] usb 6-1: Manufacturer: syz [ 946.838676][T23997] usb 6-1: SerialNumber: syz [ 946.857814][T23997] usb 6-1: config 0 descriptor?? [ 946.912683][T23997] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 947.117017][T31212] udc-core: couldn't find an available UDC or it's busy [ 947.124333][T31212] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 947.140431][ T22] usb 6-1: USB disconnect, device number 69 08:50:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@private0, @remote, @mcast1, 0x0, 0xeaa6, 0x0, 0x0, 0x0, 0x1420101}) 08:50:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x30, 0x5}, 0x0) 08:50:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001980)={&(0x7f0000000680)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001940)}, 0x24004040) 08:50:33 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), 0x4) 08:50:33 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:33 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1e0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 08:50:33 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000180)={{}, 0x0, 0xc, @inherit={0x0, 0x0}, @name="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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000180)={'wlan1\x00'}) 08:50:33 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 08:50:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x3b8}, 0x0) 08:50:33 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 948.139905][ T9773] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 948.416976][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 948.540093][ T9773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 948.719955][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 948.729101][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.737367][ T9773] usb 6-1: Product: syz [ 948.741891][ T9773] usb 6-1: Manufacturer: syz [ 948.746522][ T9773] usb 6-1: SerialNumber: syz [ 948.764479][ T9773] usb 6-1: config 0 descriptor?? [ 948.812795][ T9773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 949.017411][T31259] udc-core: couldn't find an available UDC or it's busy [ 949.024769][T31259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 949.042765][ T9773] usb 6-1: USB disconnect, device number 70 08:50:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:34 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000046c0), r0) 08:50:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 08:50:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@remote}, 0x14) 08:50:34 executing program 2: r0 = socket(0x1e, 0x4, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x88, 0x22, 0x0, 0x0) 08:50:35 executing program 2: r0 = socket(0x1e, 0x4, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(r0, 0x0, 0x0) 08:50:35 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x591202, 0x0) 08:50:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8916, 0x0) 08:50:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x16, 0x25, 0x0, 0xfc}, 0x40) [ 950.039970][ T22] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 950.325186][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 950.465147][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 950.649876][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 950.658988][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.673982][ T22] usb 6-1: Product: syz [ 950.678177][ T22] usb 6-1: Manufacturer: syz [ 950.684508][ T22] usb 6-1: SerialNumber: syz [ 950.691769][ T22] usb 6-1: config 0 descriptor?? [ 950.743001][ T22] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 950.950827][T31308] udc-core: couldn't find an available UDC or it's busy [ 950.957979][T31308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 950.981856][ T9773] usb 6-1: USB disconnect, device number 71 08:50:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:36 executing program 2: r0 = socket(0x1e, 0x4, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) 08:50:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) 08:50:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x42, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 08:50:36 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0}}, 0x0) 08:50:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 08:50:37 executing program 2: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) 08:50:37 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 08:50:37 executing program 2: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) [ 951.999840][ T22] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 952.209849][ T22] usb 6-1: device descriptor read/64, error 18 [ 952.501502][ T22] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 952.700169][ T22] usb 6-1: device descriptor read/64, error 18 [ 952.835071][ T22] usb usb6-port1: attempt power cycle [ 953.294181][ T22] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 953.489886][ T22] usb 6-1: device descriptor read/8, error -61 [ 953.790008][ T22] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 953.990588][ T22] usb 6-1: device descriptor read/8, error -61 [ 954.118668][ T22] usb usb6-port1: unable to enumerate USB device 08:50:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:39 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0xd}, 0x14) 08:50:39 executing program 2: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) 08:50:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, 0x0, 0xf7ffff7f}, 0x0) 08:50:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 08:50:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, 0x0) 08:50:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 08:50:40 executing program 2: r0 = socket(0x0, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:40 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1a, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004880)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1340, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}]}]}, {0x5b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x378, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x36c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4528}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}, {0x578, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4fb209287e30ec08}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x65c, 0x5, 0x0, 0x1, [{0x404, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x108, 0x5, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x3c4, 0x5, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}]}]}, 0x1ec4}}, 0x0) [ 955.179875][ T22] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 955.400079][ T22] usb 6-1: device descriptor read/64, error 18 [ 955.690127][ T22] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 955.889871][ T22] usb 6-1: device descriptor read/64, error 18 [ 956.011391][ T22] usb usb6-port1: attempt power cycle [ 956.439952][ T22] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 956.659869][ T22] usb 6-1: device descriptor read/8, error -61 [ 956.940010][ T22] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 957.151265][ T22] usb 6-1: device descriptor read/8, error -61 [ 957.273055][ T22] usb usb6-port1: unable to enumerate USB device 08:50:43 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:43 executing program 2: r0 = socket(0x0, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x100000, 0x68, 0x3}, 0x40) 08:50:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x28}, 0x0) 08:50:43 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000580)=0x1, 0x4) 08:50:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8983, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) 08:50:43 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:43 executing program 2: r0 = socket(0x0, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:43 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) 08:50:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000280)) 08:50:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), 0xffffffffffffffff) [ 958.319982][ T22] usb 6-1: new high-speed USB device number 80 using dummy_hcd 08:50:43 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) [ 958.549795][ T22] usb 6-1: device descriptor read/64, error 18 [ 958.840243][ T22] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 959.039801][ T22] usb 6-1: device descriptor read/64, error 18 [ 959.160111][ T22] usb usb6-port1: attempt power cycle [ 959.591831][ T22] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 959.822566][ T22] usb 6-1: device descriptor read/8, error -61 [ 960.119974][ T22] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 960.289908][ T22] usb 6-1: device descriptor read/8, error -61 [ 960.421649][ T22] usb usb6-port1: unable to enumerate USB device 08:50:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:46 executing program 2: r0 = socket(0x1e, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xc000000}, 0x1c, 0x0}, 0x0) 08:50:46 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) pipe(&(0x7f0000001440)) 08:50:46 executing program 0: r0 = socket(0x2c, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) 08:50:46 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) [ 961.058368][T31479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:50:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0xb, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:46 executing program 2: r0 = socket(0x1e, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@loopback, @ipv4, @remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1100004}) 08:50:46 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:46 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, 0x0}, 0x60012003) 08:50:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x11, 0xa, &(0x7f0000000000)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) [ 961.449899][T23997] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 961.639800][T23997] usb 6-1: device descriptor read/64, error 18 [ 961.909917][T23997] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 962.110102][T23997] usb 6-1: device descriptor read/64, error 18 [ 962.234657][T23997] usb usb6-port1: attempt power cycle [ 962.670066][T23997] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 962.860059][T23997] usb 6-1: device descriptor read/8, error -61 [ 963.129828][T23997] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 963.299961][T23997] usb 6-1: device descriptor read/8, error -61 [ 963.419962][T23997] usb usb6-port1: unable to enumerate USB device 08:50:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:49 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:49 executing program 2: r0 = socket(0x1e, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x16, 0x0, 0x0, 0xfc}, 0x40) 08:50:49 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000001080)) 08:50:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) 08:50:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) 08:50:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004880)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xe68, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x5b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x378, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x36c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}, {0x510, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}]}]}, 0xec4}}, 0x10) 08:50:49 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:49 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000180)={'wlan1\x00'}) 08:50:49 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20}, 0x0) 08:50:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 964.579792][ T2939] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 964.799974][ T2939] usb 6-1: device descriptor read/64, error 18 [ 965.092746][ T2939] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 965.299901][ T2939] usb 6-1: device descriptor read/64, error 18 [ 965.434421][ T2939] usb usb6-port1: attempt power cycle [ 965.879913][ T2939] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 966.099958][ T2939] usb 6-1: device descriptor read/8, error -61 [ 966.369829][ T2939] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 966.540039][ T2939] usb 6-1: device descriptor read/8, error -61 [ 966.660037][ T2939] usb usb6-port1: unable to enumerate USB device 08:50:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0x3) 08:50:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000010240)={'ip6gre0\x00', &(0x7f00000101c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1}}) 08:50:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:52 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, 0x0) 08:50:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x10, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40086602, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) 08:50:52 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, 0x0) 08:50:52 executing program 3: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) r1 = epoll_create(0x380000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 08:50:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 08:50:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x13, 0x0, 0x0) [ 967.740075][ T9666] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 967.929917][ T9666] usb 6-1: device descriptor read/64, error 18 [ 968.209847][ T9666] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 968.399910][ T9666] usb 6-1: device descriptor read/64, error 18 [ 968.521748][ T9666] usb usb6-port1: attempt power cycle [ 968.929874][ T9666] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 969.100069][ T9666] usb 6-1: device descriptor read/8, error -61 [ 969.371178][ T9666] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 969.539935][ T9666] usb 6-1: device descriptor read/8, error -61 [ 969.660016][ T9666] usb usb6-port1: unable to enumerate USB device 08:50:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb6010203010902", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:55 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @ipx={0x4, 0x0, 0x0, "11b0c2259c33"}, @nl=@unspec, @l2tp={0x2, 0x0, @private}}) 08:50:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, 0x0) 08:50:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}, 0x0) 08:50:55 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004880)={0x1ec4, 0x0, 0x0, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1340, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x5b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x378, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x36c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}, {0x578, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x65c, 0x5, 0x0, 0x1, [{0x404, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x108, 0x5, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x3c4, 0x5, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}]}]}, 0x1ec4}}, 0x0) 08:50:55 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 08:50:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)=']', 0x1}], 0x2}, 0x0) 08:50:55 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 08:50:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x38, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001500)) [ 970.869921][ T2939] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 971.119934][ T2939] usb 6-1: Using ep0 maxpacket: 16 [ 971.240702][ T2939] usb 6-1: config index 0 descriptor too short (expected 175, got 27) [ 971.248937][ T2939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.271257][ T2939] usb 6-1: config 0 has no interfaces? [ 971.429930][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 971.439034][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.447897][ T2939] usb 6-1: Product: syz [ 971.452420][ T2939] usb 6-1: Manufacturer: syz [ 971.457039][ T2939] usb 6-1: SerialNumber: syz [ 971.465068][ T2939] usb 6-1: config 0 descriptor?? [ 971.717106][T31603] udc-core: couldn't find an available UDC or it's busy [ 971.727172][T31603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 971.748904][ T2939] usb 6-1: USB disconnect, device number 96 08:50:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb6010203010902", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:57 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @random="62020a77accc", @val={@void}, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x83, 0x3, '|'}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 08:50:57 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f0000000200)) 08:50:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 08:50:57 executing program 3: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:50:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x0) 08:50:57 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, 0x0, 0x48}, 0x0) 08:50:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x68, 0x3}, 0x40) 08:50:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) 08:50:58 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 972.859852][T29242] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 973.150162][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 973.312703][T29242] usb 6-1: config index 0 descriptor too short (expected 175, got 27) [ 973.321038][T29242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.331834][T29242] usb 6-1: config 0 has no interfaces? [ 973.520810][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 973.534744][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.543299][T29242] usb 6-1: Product: syz [ 973.547521][T29242] usb 6-1: Manufacturer: syz [ 973.552744][T29242] usb 6-1: SerialNumber: syz [ 973.560263][T29242] usb 6-1: config 0 descriptor?? [ 973.809479][T31647] udc-core: couldn't find an available UDC or it's busy [ 973.816607][T31647] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 973.839154][ T9773] usb 6-1: USB disconnect, device number 97 08:50:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb6010203010902", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:50:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x328, 0x0, 0xffffffff, 0x0, 0xf0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ipv6={@empty, @local, [], [], 'syz_tun\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv6=@private2, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv4=@loopback, @port, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 08:50:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0xa29, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) 08:50:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)=ANY=[], 0x590) 08:50:59 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 08:50:59 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:59 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:50:59 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:50:59 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12043) 08:50:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004480)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 08:50:59 executing program 3: r0 = socket(0xa, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 08:51:00 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 974.839862][T29242] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 975.089880][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 975.210715][T29242] usb 6-1: config index 0 descriptor too short (expected 175, got 27) [ 975.222633][T29242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.246863][T29242] usb 6-1: config 0 has no interfaces? [ 975.425562][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 975.434885][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.448472][T29242] usb 6-1: Product: syz [ 975.452930][T29242] usb 6-1: Manufacturer: syz [ 975.458767][T29242] usb 6-1: SerialNumber: syz [ 975.470811][T29242] usb 6-1: config 0 descriptor?? [ 975.715681][T31692] udc-core: couldn't find an available UDC or it's busy [ 975.723169][T31692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 975.744255][ T9763] usb 6-1: USB disconnect, device number 98 08:51:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x11, 0x68, &(0x7f0000000000)={{{@in=@empty, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 08:51:01 executing program 1: socket(0x25, 0x1, 0xa35876cd) 08:51:01 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:01 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) 08:51:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 08:51:01 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x68, 0x3, 0x0, r0, 0x0, '\x00', 0x0, r0, 0x5, 0x81}, 0x40) 08:51:01 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:01 executing program 4: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000040)={0x1, 0x8, 0x68, 0x3}, 0x40) 08:51:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x25, 0x0, &(0x7f0000000b40)) 08:51:01 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}) 08:51:01 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 976.700277][ T9763] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 976.959824][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 977.101425][ T9763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.119777][ T9763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 977.300895][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 977.317246][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.325863][ T9763] usb 6-1: Product: syz [ 977.335679][ T9763] usb 6-1: Manufacturer: syz [ 977.340446][ T9763] usb 6-1: SerialNumber: syz [ 977.350581][ T9763] usb 6-1: config 0 descriptor?? [ 977.609029][T31734] udc-core: couldn't find an available UDC or it's busy [ 977.616154][T31734] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 977.643266][T29242] usb 6-1: USB disconnect, device number 99 08:51:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:03 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000010240)={'ip6gre0\x00', 0x0}) 08:51:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001980)={&(0x7f0000000680)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c, 0x0}, 0x24004040) 08:51:03 executing program 3: sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) 08:51:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x1, &(0x7f0000000f40)=@raw=[@ldst], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0xfd, &(0x7f0000000fc0)=""/253, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) 08:51:03 executing program 3: bpf$PROG_LOAD(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:03 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:03 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_FIOGETOWN(r0, 0x8906, 0x0) 08:51:03 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) 08:51:03 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) [ 978.680040][ T9666] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 978.959543][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 979.079959][ T9666] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.091404][ T9666] usb 6-1: config 0 interface 0 has no altsetting 0 [ 979.260021][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 979.269116][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.278599][ T9666] usb 6-1: Product: syz [ 979.283693][ T9666] usb 6-1: Manufacturer: syz [ 979.288318][ T9666] usb 6-1: SerialNumber: syz [ 979.301583][ T9666] usb 6-1: config 0 descriptor?? [ 979.562734][T31781] udc-core: couldn't find an available UDC or it's busy [ 979.570143][T31781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 979.587964][ T9763] usb 6-1: USB disconnect, device number 100 08:51:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:05 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 08:51:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffd43) 08:51:05 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x3000, 0x20, 0xe4d}, 0x10) 08:51:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0xffff8c0c, 0x0, 0x2}, 0x40) 08:51:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 08:51:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x81c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 08:51:05 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:05 executing program 1: pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x0) 08:51:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000180)=""/16, 0x10, 0x0, 0x0, 0x0) 08:51:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0x0}, 0x4004) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) [ 980.562823][T29242] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 980.819781][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 980.941129][T29242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.959806][T29242] usb 6-1: config 0 interface 0 has no altsetting 0 [ 981.129998][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 981.139128][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.148099][T29242] usb 6-1: Product: syz [ 981.152502][T29242] usb 6-1: Manufacturer: syz [ 981.157387][T29242] usb 6-1: SerialNumber: syz [ 981.166178][T29242] usb 6-1: config 0 descriptor?? [ 981.427547][T31834] udc-core: couldn't find an available UDC or it's busy [ 981.434572][T31834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 981.456517][ T9666] usb 6-1: USB disconnect, device number 101 08:51:07 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0xe, 0x0, &(0x7f0000000b40)=0x300) 08:51:07 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x81, 0x0, "624ee65033d33daf89c61111ae28676f0c36994810a9a35a7664fa1d563ff7ff8ec902002798d557aef27b7ec6a972b05e8177d7cdca7e762afd3d48da3042"}, 0x60) 08:51:07 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:51:07 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000100)=@hci, 0x80, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 08:51:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b0001000000000904000001030000", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:07 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev}]}, 0x28}}, 0x0) 08:51:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000080)) 08:51:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in], 0x10) 08:51:07 executing program 4: getsockname$llc(0xffffffffffffffff, 0x0, 0x0) 08:51:07 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000100)) 08:51:07 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x10) 08:51:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0xec4, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_OURS={0xe9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe6c, 0x5, "e6c3bd8b68d1c550a2d5be75f8f16cb04756005bf691543907b4b3730c93f204c4c5d3deb78f528440e50b628269a4fc9abb4bff6b5cb623e2bc1e3de5e08e9ad001a919cc1d5c0ed04056e30e7f9011a03fe8d5d38e6f0b7d3ccc4c9711a6282d44db94daad30d9d483b6fd3624573929d3779efc624ff8ffee866533bc1fbc5f0eff530b1db64f77e32b8fa78342f3f717e6eb48a48e6b608d72b87e2507d2876adc71ce36261b43d5d173085bcf8f5b0d8a261e54063c49f14c75a59e908396588ab2a1b12737b78ead9be0a31bd0bd68bfaece6f2504693601ec53f4cf6d9a35d163a1d5f6949aef3ac9b21e838a02d44a963c8a69575c221a4034082789b64ac522a4d456674e6a7cd131748260468c725a6f0e9f02a4ae8fada64de28ffa86221c8b85563c77e02e4af7905d91a4dba265994a526b70c1a542f6f36a451a2d2eac770a709e9e8a1b3285d221167582d07332deed416ae3954974afb9373cf90e2e11ad49eead11b1e0b875c95b2f86a9edc1ef479d092e869354514a576de2ac1d05430b257be56fdef928ed2a50a9705b367c6ecf2afd08444badd21f1148cfe468811d6b6431a1842f119eb668cc50785a33466d99d68a8974c5e9e87a5f6992228da11512f5fe8486b694e925ef6ab744c64b0cb3dfecf6d6e6aaedab634ce3458cf00e951af41239100f9efaee17e0099e8f80cf379c12da26f2a21461de210ab5dff1de95593599b058a1c8add427ad650fc5c57ea44fe0a4e44995cd57a7416f1411ee63a464858431144b8035846f3f4dd8692c63f2664066f3de8fccfd9098a1abd489fd5fad2fa7d4eeb0d5f3bc5a8a0988a3e52d612b7608da320e3944f72f8f1728598d3be05f018e3d5405c066e651a26085bd73aa7a8d200265617d13748783149009fdf94de512b8e21779bb67ede19a2354bf88c3bd2cf9c33d79928b3f1080e117c4dcbe725ffa1ea272d88c9aa7307d3996d539ccfa43602a268b0c1af050d4c1aeccff13bbf2fe65f57185a104985b3240a572f3f7244376d5fb16c3f0de6e937918d9a105914e9488d3f8519c08d2723741e39709d760e6172fb9d255a1aaa56eaab64eaf9e87fd7610f229e22a0bfed32934effa526076d9d59cc653721a85f2fc74a1b1557b251666747e48ef4ff85955f2cc491ce3d65a66d4e8c7a3f61611e9ca68c729260887faf0fdcdefc93168d5b95e1eb4d27ac813c1d974047516a1e38cbc944c8d7d47e3fad43da7d6ffdb1e705a88b159e08a17a35d32d0aa7c4dd13c1e69c367feaccf7ee549295787fc673f681340655921e9590578fdcca927e19f3840fc6df61c66d4f523a5c955c77e13fb6c6d29304fbcc73aac581035ae5f316852a430211a6d29154977e42912f9236cf6670f03a9009701877377545a2ecfc29d688079f344ca40c1f823ba404c37ebead475b716a53f5c823e8d0283d6f74b63594fba195d9c53a9e02b1f6a589230ad1931aa8a1726041fe1af91b4681259df650aa53d25e150a53f69f06b9de92005fe38c1b107750a983d01890868f4ecba61fded75e9e6a41f64b6d03d038cdfcaa64b30be66ebce93262463e2c177810cf3dc80dfd8d88757185455ba862d2189ecf3ceed5cf5e937e20b5c840d32bbdabd35c91fd8ef0c8a95c310bdb4c41aad35c0f8974d7a536e468805b6a43c2d18e83421b3acf3e1a85d2a2ed49ee9796b4e36b1ee4bf6ec1e7c3304352680a238c173ea97360d699a311584e028ed526bb805ad348ef5ac2ad980e12260de3625d87f88be10ee799baac836dd1debfbbc61a5f90b7e83dac0a210e897febf96e50977e88fa340e68cff7723d8bda2f28ec383754626788da37da1d9eb696b4e22ab7e271c10b82a9d7a13f036265c0a7d22dbe0a053e9d12e14d2e209453feeb25392c195a95811126bb039caecfffdc31a47141c2fbc3b45c909247af3513b7e52a3c140b090cef99f25f88d16b071d46c69b5557b9e2cfa719e47512f28df7605110a3461da3ed887db64b176d97bd8be948f2ff4c0b7af80acd5fa871c8c43d33e47f2874b48423878f1da6f025ae2eb62fd34758567e61e73cc11605b7ec6f8cc7d95e81f3393f57c0f23a681085391a1fd013a94403a44ae63551c475615d3b6b27db3743ed581617c4961c8f1768a31a172181566766853f0177c562cf82958c260e073a6808af7d767aafa2b040f3ac7a456dded3f9d3526830926f597bfe59ee36f3bc10487a6b4d30ed662b631af2827b3113f9d14cf6d1e06e9fa72fd9bcf246a93aaca52cf132f41302ac2280aa967d406da509f6d340fc237635612d56172b982651c70e8737d0d24ff55b0fc2ed966b5afafa831d960a06f8fd6df11a6db36cb446c636209e53a502dddafc6c312aa6b737bda10e3cda56394dcd5ab0a791598df1b6651ead98766e7328f04fcaede56df6f679b5ab252f10f4ebe6b41d50dfcdd803b732e533f82e46bbac7b9da8bd257169e51001c55615bc5895bc1d6f1461ed5fe556c171a37f48cd5cb4efff807e2855e871821858fe1daabace54d65fabec3a096288e01f6c27b2edb460d56cc9223b38e2dfee74d33ed77f9d1fdb2c0771f5521164f715b91ad9c6d1a2dd91c669b8468c815b144fb3a35ba6e39162cadea664bac8b0a02a55c18f7a74da845534cda3b6612eed716333a109a4ca8ba93dac7c346f1b2b5c626da881b87ea4725e2bd4ad3dde85c46abd4d7193e9191522ac2986800bcaaedb2b2bfb2fac407fa583f456b4e252802816f705c6d6abc7ede2c13dbcfcca226ae24eac8393651dea9258accdd2bc3e539d65044ad3eac4f7e945f287163c3c57cb874c0bd7439f74f1e82c45d7b1ef9ea7cc5fc1bb4c9aadef1030377f6d03a1a5a198ab697a8f69f82d350f334a67bc8ca1dbed54b41491afd50628823e072cc3da8e15ad3cde1dd376ca889e980bcbb47ac712f2d8a60879fc3b1d47fefa1c48e75fa0b91f2fbbccdb8773296c87164644feacda117f2e8fc01b22adda3bb866cd62d864f7da2153e566228e137facfb4da5788c14fc6dd44b2a2110c1adc256d01b5f12995fa300fed464f17a84c850c786c8bc3ac4bad88721de2b34b12785afcffcc50d12f67f930b76ee9b61deb4e81e31c8d6ed24d275275ac7f4feb2a8b19d83073450c1e4c60239e0730f93983855d81bb9b6d4e929908da012a1895360429ab62ee5cf7af6ec0c8e0f29aa58d5f4ff789b8a65ab22768ffada9fba8b140d7a687284585efd5d0a8da8aad10c56492a04e76c45cf16cadd75a1cd90accc7cc9c2b2ab0b1b65803b479332e31377f7dee57b14d1c5066bfe70bceeb77820186fc0184a0ffd9a0df0736dbb52a20504cec52b0c8f91139d092698b544730b34ee3d4839c516f152237babe7e6632512493810e4143ab66e5641ea4b229abfae8ae5553727a6c72b18a5e3f07541e3ffe68b1a1b44f52263db8aba956e9f226a545a72947d0165187cf27af854833c83516f9febb95b2a6bbc2718f1335e2f6cf8b62e0bbac888e6463849583253b266580eb071fd4e19251d653cd57d3c29e0c48c9e17e2b986676f13648d6ec6c4f43bb3db5181f90176f7d73cea44d643f5914ff8411e5a01d768d27b02a6b190dae416305067198cba59d4b0138d1fb8e9ec8f12c20e9e7bd4ad89a3f55b05b11750a497aa94511dfc966783fafe6a5f83cf2284e006b9f15c33b0504b9683c7f1c3bc5ac639202dc17d6d870f51043aa06e39449504bcd612d0538e4531f64ee889a241e9e9aa1d19d46172c8bbb0e14acf86062eb78b054efcee5db5ffad51c2a1538b5db123d1e463079ff0496c9194b905bad5d8208ca58d3801c0ebb38ddf3465d991144d2c87c6572e335f21e604f85939c13f9ec15cf9df96c5fc7103a7e90da29be005f2b9f707e61baf126f0178f15e5382fc128e2697ea052634b2f2acff4148e079db648293c49c131e96c1c948d6c1d124f4886583490baf2cf485ce683d1d2393715caf6dd13dab584f23d21876f2353d1bc69accd443abc5758105a645e7bb282ef974b03b2d58cb484bcd7f9a67258b4d1a8aa5812e43d45f5f0c6aacea8b293071471e401ad6aa91425a3630b315267d285f2608680bb75d64a555a59a541b77a38882112ef20e6308bb4c4d5cf55f3a4851779455dc33a8c0203a9ad7f3bdf703bfa9dd153e2fb5c182b9ad9b4b5b21d257c0c2f2a24e615059d4124a66fbcd95cc25ed4633e6e87c0c8cafaea805af4ff3624f049684343f4d093d4dfbf60d179ee42ab950ac2f9e8d3e34da32b7310b5fdb085b5d9312559c931ca358a55ffe08d12d5894589f174d1f83ce5a458258570d8c191f4fa1f8215924802cfb90b0af7e847c69ce99ed4bfc73e7e5ac79c794f8b613915dcea722829a64405e62392bd7a2417fd5b64a1d93ce2891418f9e0ce94d99f41dbf840fa8d12c50270234e1b78fd60487d9e09ef4abcb348d009953b210e6dc777575689a8697cca1d0d70d0f399577b4a139f3c827a438dfe0152d3c877c24a315c3bd42f6e1be034bc0bfd56282c03bb767e2b52aa191e50a2ab41ff563a8f611797ded7fd6bb691c9f3feed023f6ecfedf89ae7916f74d0eade95a7b2f4c82df721e5e769958c51f73b1763afac587cf03b54337e4d90134fa05fc9a1a56b27ec0f2088bf5fe049b9412ffcb51c7ff27cb5b4768e4c3d55aed260aa2090c2227d38d26b0a81b76dd58af8530eb3b0544aa415b2a642eee588a90363470ed7d7672faee8863fdd86660cf7b046536006f379880e61d6062ec88c115ecd87632c853395eecae927ca61221c17550b88aef88dcd66aa24154af77c82ac32f03091d9848cc01cf5eb5e9b00724ffcc4f1b9b579ddf9ccbd4e8687ba3d142d55afd45a6e049afd2cc67d964d56859d0377cfee34347ba2c6cfb2dd6664103b6571f8ab3d29f9fa5dac2664149042adc0e3a487bbfae90950d38916bb53846dbeb444194252f38cd227ef097200a796d2dbf9b8abe6bbb7be8831d60eb45cc172e6e47ff3e502b2b92c004f4a3d301c84a1c84017a9fa3d7411fd6f364d5e27d90394f71af6d81dfd0817b27031350e5ffe49e34602cc568adbab6c0baee99d76f7f4491a37e99266a3bf5e76ebaff952d0d0bf3a13fc8cb1b2ee3c63bd7d6620848560bcaa5243ec2b050e569ee6e7121054a1562cd2d36f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0xec4}}, 0x4000) 08:51:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) [ 982.479954][ T9773] usb 6-1: new high-speed USB device number 102 using dummy_hcd 08:51:07 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 982.739871][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 982.870644][ T9773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.885735][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.089208][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 983.109817][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.117939][ T9773] usb 6-1: Product: syz [ 983.124396][ T9773] usb 6-1: Manufacturer: syz [ 983.149963][ T9773] usb 6-1: SerialNumber: syz [ 983.172686][ T9773] usb 6-1: config 0 descriptor?? [ 983.414330][T31891] udc-core: couldn't find an available UDC or it's busy [ 983.421486][T31891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 983.472435][ T9773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 983.482771][ T9773] usb 6-1: USB disconnect, device number 102 08:51:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x94dc, @none, 0x3}, 0xe) 08:51:09 executing program 3: r0 = socket(0x2c, 0x3, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 08:51:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x25, 0x0, &(0x7f0000000b40)=0x300) 08:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd708669dbdfe201000000050007"], 0x34}}, 0x0) 08:51:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b0001000000000904000001030000", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:09 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 984.023002][T31944] __nla_validate_parse: 2 callbacks suppressed [ 984.023024][T31944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:51:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="53396fefaaa5db6ed46bd43bd5a727ca4339", 0x12}, {&(0x7f0000000180)="94227b4dd86266b90ca3a64b277667c3163e8c3001b9ca6f20308faeb35589edc5cf06d67b73503171f480541a80b57fd682150eab7b49d4d6dade5327e16e15426ed4738f56bb439f83cd51ccbb31ad1f7724907e579b4d5241993aa98dc09286675636a8e87d6792a0a70cba3bd1a79436a61edb7e7bb32df91d801fe72844122c0991cf8454bfb4b1c3a62d66e8f31687e110d6bc917276f6b75fde7cf2c15671608a14d28b853c48d259ca7c551d1463157ffa9148b9f7056f1e886b326fc24c95963d5fddfc", 0xc8}, {&(0x7f0000000040)="6e14e6a334fed1de0e145f78fa38e77e7cfd3864c1a91ad1efeda5ad31ca7f23775553471001ea76b38ff90019a1460b9cdc9a1574d58577064962858e57871c2290a0ce84f1865b9fc29ac4ac310b188301b93cc9493ac0b4e319d0", 0x5c}, {&(0x7f00000000c0)="076f360957e7b681f2569738e6bc5b4b42b4", 0x12}, {&(0x7f0000000280)="3f4abaef947075eca62ffa2fac6d21cb5e873d85c58666a8e4560b107bb73d7c21ef0f0570f3758e8c9323b5f44557c727f0766f6e70cfaa19fd65808b", 0xfffffffffffffd1d}, {&(0x7f00000005c0)="b6cce806ec64faf27f4f02769dddd39334527d3a917b92a95d53022209defaf114f75088bc0f16b9fedfb81615349cb3eedc723d5d0fda7f4a3caa41de606892c0d9bdee3aa21aea1cce09c030dbe6dca24df9ec9851c0a08057f22fe84acd20302320fa6499c2c4920972a1b6fb0de94de323c97e5d675031e97a49e271ce287767285455fec388dac3bf4aaa701328eb782f901b2c54f29d0b2c40319720928bd37ba237f62ff56d38176a1b1fb0c4a118b5f0a63f776b6fa4a3578402cf7c5d7055e54f88b719249632699da37e779e5f8815d083ba958edf3f6b6a29f681", 0x3d}, {&(0x7f0000000300)="3fc9ec7f74548588a968383fee3f0ded11035325e71f7103c1c15a17136c3f9071872df0f2f21c1059841322c8b2fc5f5bb5208bcb36da969959168e60c4ba3fec3fc169fe55228dbc3fa3b0ffc6919578", 0x51}, {&(0x7f0000000380)="8707", 0x2}], 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x130}}], 0x1, 0x8014) 08:51:09 executing program 0: pipe(&(0x7f0000000c80)={0xffffffffffffffff}) accept4$bt_l2cap(r0, 0x0, 0x0, 0x7) [ 984.093757][T31949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:51:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000080)={'erspan0\x00', @ifru_data=0x0}) 08:51:09 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x801c581f, 0x0) 08:51:09 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x70, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:51:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_OURS={0xea0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe99, 0x5, "e6c3bd8b68d1c550a2d5be75f8f16cb04756005bf691543907b4b3730c93f204c4c5d3deb78f528440e50b628269a4fc9abb4bff6b5cb623e2bc1e3de5e08e9ad001a919cc1d5c0ed04056e30e7f9011a03fe8d5d38e6f0b7d3ccc4c9711a6282d44db94daad30d9d483b6fd3624573929d3779efc624ff8ffee866533bc1fbc5f0eff530b1db64f77e32b8fa78342f3f717e6eb48a48e6b608d72b87e2507d2876adc71ce36261b43d5d173085bcf8f5b0d8a261e54063c49f14c75a59e908396588ab2a1b12737b78ead9be0a31bd0bd68bfaece6f2504693601ec53f4cf6d9a35d163a1d5f6949aef3ac9b21e838a02d44a963c8a69575c221a4034082789b64ac522a4d456674e6a7cd131748260468c725a6f0e9f02a4ae8fada64de28ffa86221c8b85563c77e02e4af7905d91a4dba265994a526b70c1a542f6f36a451a2d2eac770a709e9e8a1b3285d221167582d07332deed416ae3954974afb9373cf90e2e11ad49eead11b1e0b875c95b2f86a9edc1ef479d092e869354514a576de2ac1d05430b257be56fdef928ed2a50a9705b367c6ecf2afd08444badd21f1148cfe468811d6b6431a1842f119eb668cc50785a33466d99d68a8974c5e9e87a5f6992228da11512f5fe8486b694e925ef6ab744c64b0cb3dfecf6d6e6aaedab634ce3458cf00e951af41239100f9efaee17e0099e8f80cf379c12da26f2a21461de210ab5dff1de95593599b058a1c8add427ad650fc5c57ea44fe0a4e44995cd57a7416f1411ee63a464858431144b8035846f3f4dd8692c63f2664066f3de8fccfd9098a1abd489fd5fad2fa7d4eeb0d5f3bc5a8a0988a3e52d612b7608da320e3944f72f8f1728598d3be05f018e3d5405c066e651a26085bd73aa7a8d200265617d13748783149009fdf94de512b8e21779bb67ede19a2354bf88c3bd2cf9c33d79928b3f1080e117c4dcbe725ffa1ea272d88c9aa7307d3996d539ccfa43602a268b0c1af050d4c1aeccff13bbf2fe65f57185a104985b3240a572f3f7244376d5fb16c3f0de6e937918d9a105914e9488d3f8519c08d2723741e39709d760e6172fb9d255a1aaa56eaab64eaf9e87fd7610f229e22a0bfed32934effa526076d9d59cc653721a85f2fc74a1b1557b251666747e48ef4ff85955f2cc491ce3d65a66d4e8c7a3f61611e9ca68c729260887faf0fdcdefc93168d5b95e1eb4d27ac813c1d974047516a1e38cbc944c8d7d47e3fad43da7d6ffdb1e705a88b159e08a17a35d32d0aa7c4dd13c1e69c367feaccf7ee549295787fc673f681340655921e9590578fdcca927e19f3840fc6df61c66d4f523a5c955c77e13fb6c6d29304fbcc73aac581035ae5f316852a430211a6d29154977e42912f9236cf6670f03a9009701877377545a2ecfc29d688079f344ca40c1f823ba404c37ebead475b716a53f5c823e8d0283d6f74b63594fba195d9c53a9e02b1f6a589230ad1931aa8a1726041fe1af91b4681259df650aa53d25e150a53f69f06b9de92005fe38c1b107750a983d01890868f4ecba61fded75e9e6a41f64b6d03d038cdfcaa64b30be66ebce93262463e2c177810cf3dc80dfd8d88757185455ba862d2189ecf3ceed5cf5e937e20b5c840d32bbdabd35c91fd8ef0c8a95c310bdb4c41aad35c0f8974d7a536e468805b6a43c2d18e83421b3acf3e1a85d2a2ed49ee9796b4e36b1ee4bf6ec1e7c3304352680a238c173ea97360d699a311584e028ed526bb805ad348ef5ac2ad980e12260de3625d87f88be10ee799baac836dd1debfbbc61a5f90b7e83dac0a210e897febf96e50977e88fa340e68cff7723d8bda2f28ec383754626788da37da1d9eb696b4e22ab7e271c10b82a9d7a13f036265c0a7d22dbe0a053e9d12e14d2e209453feeb25392c195a95811126bb039caecfffdc31a47141c2fbc3b45c909247af3513b7e52a3c140b090cef99f25f88d16b071d46c69b5557b9e2cfa719e47512f28df7605110a3461da3ed887db64b176d97bd8be948f2ff4c0b7af80acd5fa871c8c43d33e47f2874b48423878f1da6f025ae2eb62fd34758567e61e73cc11605b7ec6f8cc7d95e81f3393f57c0f23a681085391a1fd013a94403a44ae63551c475615d3b6b27db3743ed581617c4961c8f1768a31a172181566766853f0177c562cf82958c260e073a6808af7d767aafa2b040f3ac7a456dded3f9d3526830926f597bfe59ee36f3bc10487a6b4d30ed662b631af2827b3113f9d14cf6d1e06e9fa72fd9bcf246a93aaca52cf132f41302ac2280aa967d406da509f6d340fc237635612d56172b982651c70e8737d0d24ff55b0fc2ed966b5afafa831d960a06f8fd6df11a6db36cb446c636209e53a502dddafc6c312aa6b737bda10e3cda56394dcd5ab0a791598df1b6651ead98766e7328f04fcaede56df6f679b5ab252f10f4ebe6b41d50dfcdd803b732e533f82e46bbac7b9da8bd257169e51001c55615bc5895bc1d6f1461ed5fe556c171a37f48cd5cb4efff807e2855e871821858fe1daabace54d65fabec3a096288e01f6c27b2edb460d56cc9223b38e2dfee74d33ed77f9d1fdb2c0771f5521164f715b91ad9c6d1a2dd91c669b8468c815b144fb3a35ba6e39162cadea664bac8b0a02a55c18f7a74da845534cda3b6612eed716333a109a4ca8ba93dac7c346f1b2b5c626da881b87ea4725e2bd4ad3dde85c46abd4d7193e9191522ac2986800bcaaedb2b2bfb2fac407fa583f456b4e252802816f705c6d6abc7ede2c13dbcfcca226ae24eac8393651dea9258accdd2bc3e539d65044ad3eac4f7e945f287163c3c57cb874c0bd7439f74f1e82c45d7b1ef9ea7cc5fc1bb4c9aadef1030377f6d03a1a5a198ab697a8f69f82d350f334a67bc8ca1dbed54b41491afd50628823e072cc3da8e15ad3cde1dd376ca889e980bcbb47ac712f2d8a60879fc3b1d47fefa1c48e75fa0b91f2fbbccdb8773296c87164644feacda117f2e8fc01b22adda3bb866cd62d864f7da2153e566228e137facfb4da5788c14fc6dd44b2a2110c1adc256d01b5f12995fa300fed464f17a84c850c786c8bc3ac4bad88721de2b34b12785afcffcc50d12f67f930b76ee9b61deb4e81e31c8d6ed24d275275ac7f4feb2a8b19d83073450c1e4c60239e0730f93983855d81bb9b6d4e929908da012a1895360429ab62ee5cf7af6ec0c8e0f29aa58d5f4ff789b8a65ab22768ffada9fba8b140d7a687284585efd5d0a8da8aad10c56492a04e76c45cf16cadd75a1cd90accc7cc9c2b2ab0b1b65803b479332e31377f7dee57b14d1c5066bfe70bceeb77820186fc0184a0ffd9a0df0736dbb52a20504cec52b0c8f91139d092698b544730b34ee3d4839c516f152237babe7e6632512493810e4143ab66e5641ea4b229abfae8ae5553727a6c72b18a5e3f07541e3ffe68b1a1b44f52263db8aba956e9f226a545a72947d0165187cf27af854833c83516f9febb95b2a6bbc2718f1335e2f6cf8b62e0bbac888e6463849583253b266580eb071fd4e19251d653cd57d3c29e0c48c9e17e2b986676f13648d6ec6c4f43bb3db5181f90176f7d73cea44d643f5914ff8411e5a01d768d27b02a6b190dae416305067198cba59d4b0138d1fb8e9ec8f12c20e9e7bd4ad89a3f55b05b11750a497aa94511dfc966783fafe6a5f83cf2284e006b9f15c33b0504b9683c7f1c3bc5ac639202dc17d6d870f51043aa06e39449504bcd612d0538e4531f64ee889a241e9e9aa1d19d46172c8bbb0e14acf86062eb78b054efcee5db5ffad51c2a1538b5db123d1e463079ff0496c9194b905bad5d8208ca58d3801c0ebb38ddf3465d991144d2c87c6572e335f21e604f85939c13f9ec15cf9df96c5fc7103a7e90da29be005f2b9f707e61baf126f0178f15e5382fc128e2697ea052634b2f2acff4148e079db648293c49c131e96c1c948d6c1d124f4886583490baf2cf485ce683d1d2393715caf6dd13dab584f23d21876f2353d1bc69accd443abc5758105a645e7bb282ef974b03b2d58cb484bcd7f9a67258b4d1a8aa5812e43d45f5f0c6aacea8b293071471e401ad6aa91425a3630b315267d285f2608680bb75d64a555a59a541b77a38882112ef20e6308bb4c4d5cf55f3a4851779455dc33a8c0203a9ad7f3bdf703bfa9dd153e2fb5c182b9ad9b4b5b21d257c0c2f2a24e615059d4124a66fbcd95cc25ed4633e6e87c0c8cafaea805af4ff3624f049684343f4d093d4dfbf60d179ee42ab950ac2f9e8d3e34da32b7310b5fdb085b5d9312559c931ca358a55ffe08d12d5894589f174d1f83ce5a458258570d8c191f4fa1f8215924802cfb90b0af7e847c69ce99ed4bfc73e7e5ac79c794f8b613915dcea722829a64405e62392bd7a2417fd5b64a1d93ce2891418f9e0ce94d99f41dbf840fa8d12c50270234e1b78fd60487d9e09ef4abcb348d009953b210e6dc777575689a8697cca1d0d70d0f399577b4a139f3c827a438dfe0152d3c877c24a315c3bd42f6e1be034bc0bfd56282c03bb767e2b52aa191e50a2ab41ff563a8f611797ded7fd6bb691c9f3feed023f6ecfedf89ae7916f74d0eade95a7b2f4c82df721e5e769958c51f73b1763afac587cf03b54337e4d90134fa05fc9a1a56b27ec0f2088bf5fe049b9412ffcb51c7ff27cb5b4768e4c3d55aed260aa2090c2227d38d26b0a81b76dd58af8530eb3b0544aa415b2a642eee588a90363470ed7d7672faee8863fdd86660cf7b046536006f379880e61d6062ec88c115ecd87632c853395eecae927ca61221c17550b88aef88dcd66aa24154af77c82ac32f03091d9848cc01cf5eb5e9b00724ffcc4f1b9b579ddf9ccbd4e8687ba3d142d55afd45a6e049afd2cc67d964d56859d0377cfee34347ba2c6cfb2dd6664103b6571f8ab3d29f9fa5dac2664149042adc0e3a487bbfae90950d38916bb53846dbeb444194252f38cd227ef097200a796d2dbf9b8abe6bbb7be8831d60eb45cc172e6e47ff3e502b2b92c004f4a3d301c84a1c84017a9fa3d7411fd6f364d5e27d90394f71af6d81dfd0817b27031350e5ffe49e34602cc568adbab6c0baee99d76f7f4491a37e99266a3bf5e76ebaff952d0d0bf3a13fc8cb1b2ee3c63bd7d6620848560bcaa5243ec2b050e569ee6e7121054a1562cd2d36f424c4fd2fbdea94905a7300e2016687ade2155ee64c972cfd9cf65994ccb3e77bc87d7ea8bd38812a0db2cdea2"}]}]}, 0xec4}}, 0x0) 08:51:09 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004e00)='ns/user\x00') 08:51:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:51:09 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) [ 984.419923][ T9773] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 984.689840][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 984.840537][ T9773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.859907][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 985.070832][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 985.080373][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.108428][ T9773] usb 6-1: Product: syz [ 985.114128][ T9773] usb 6-1: Manufacturer: syz [ 985.119105][ T9773] usb 6-1: SerialNumber: syz [ 985.135476][ T9773] usb 6-1: config 0 descriptor?? [ 985.395812][T31950] udc-core: couldn't find an available UDC or it's busy [ 985.403281][T31950] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 985.444510][ T9773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 985.467927][ T9773] usb 6-1: USB disconnect, device number 103 08:51:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b0001000000000904000001030000", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 08:51:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 08:51:11 executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x9, &(0x7f0000000040), 0x8) 08:51:11 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000500)=@raw=[@ldst, @map, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:11 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x18, 0x4) 08:51:11 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 08:51:11 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x20, 0x1}, 0xe) 08:51:11 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x81) 08:51:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_OURS={0xea0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe99, 0x5, "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"}]}]}, 0xec4}}, 0x0) [ 986.419826][T29242] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 986.739890][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 986.870002][T29242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.882109][T29242] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 987.089911][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 987.099039][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.108494][T29242] usb 6-1: Product: syz [ 987.113333][T29242] usb 6-1: Manufacturer: syz [ 987.118036][T29242] usb 6-1: SerialNumber: syz [ 987.128464][T29242] usb 6-1: config 0 descriptor?? [ 987.379450][T32004] udc-core: couldn't find an available UDC or it's busy [ 987.386960][T32004] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 987.452476][T29242] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 987.463284][T29242] usb 6-1: USB disconnect, device number 104 08:51:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b00010000000009040000010300000009", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:13 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 08:51:13 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 08:51:13 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 08:51:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 08:51:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x3d0, 0x120, 0x1f0, 0x1f0, 0x3d0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x81}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@mh={{0x28}, {"a84b", 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb043, 0x0, @ipv4=@private}}}, {{@ipv6={@empty, @loopback, [], [0xffffff00], 'vlan1\x00', 'ip6tnl0\x00', {}, {0xff}, 0x5e, 0x7f, 0x3, 0x64}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x28df}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) [ 987.999636][T32044] x_tables: duplicate underflow at hook 1 08:51:13 executing program 3: r0 = socket(0x22, 0x2, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 08:51:13 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = epoll_create(0xc81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 08:51:13 executing program 2: socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) 08:51:13 executing program 0: socketpair(0xa, 0x3, 0x5, &(0x7f0000000400)) 08:51:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 988.440015][ T9773] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 988.689868][ T9773] usb 6-1: Using ep0 maxpacket: 16 [ 988.810654][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 988.979976][ T9773] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 988.989537][ T9773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.998244][ T9773] usb 6-1: Product: syz [ 989.002992][ T9773] usb 6-1: Manufacturer: syz [ 989.007882][ T9773] usb 6-1: SerialNumber: syz [ 989.015733][ T9773] usb 6-1: config 0 descriptor?? [ 989.064560][ T9773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 989.268469][T32049] udc-core: couldn't find an available UDC or it's busy [ 989.275961][T32049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 989.297417][ T9773] usb 6-1: USB disconnect, device number 105 08:51:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b00010000000009040000010300000009", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 08:51:15 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_FIOGETOWN(r0, 0x89a0, &(0x7f0000000140)) 08:51:15 executing program 2: socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) 08:51:15 executing program 0: r0 = socket(0x22, 0x2, 0x4) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) 08:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, &(0x7f0000000780)=0x20) 08:51:15 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x8c453438b30fe9ae) 08:51:15 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="cf2b5de55eff402aa5e9b3d24e963f55844ada8b6130fb0c8b5655e9cd7ccdc15e59fe60a431c995f920b402e9705d82bd0405d0957a286923d07e43939a8fff5b0266daa2e59f70c077a84222dd6a018f7d371116af5fe1b91bee73111cccd1f28e5f6bb1ab6bf83f43cc8617302cf762aca04b8e9b4e483a28008edfdf93ed", 0x80}}, 0x0) 08:51:15 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) 08:51:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 08:51:15 executing program 2: socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) 08:51:15 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="cf2b5de55eff402aa5e9b3d24e", 0xd}}, 0x0) [ 990.309112][T32109] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.309990][ T9763] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 990.579975][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 990.700841][ T9763] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 990.909956][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 990.919125][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.927692][ T9763] usb 6-1: Product: syz [ 990.932378][ T9763] usb 6-1: Manufacturer: syz [ 990.937048][ T9763] usb 6-1: SerialNumber: syz [ 990.944377][ T9763] usb 6-1: config 0 descriptor?? [ 991.012779][ T9763] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 991.220495][T32096] udc-core: couldn't find an available UDC or it's busy [ 991.227468][T32096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 991.249778][ T9763] usb 6-1: USB disconnect, device number 106 08:51:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b00010000000009040000010300000009", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:17 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="cf455d", 0x3}}, 0x0) 08:51:17 executing program 3: r0 = socket(0x2b, 0x1, 0x1) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 08:51:17 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=[{0x18, 0x0, 0x0, '!'}, {0x10}], 0x28}}], 0x2, 0x0) 08:51:17 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, 0x0, 0x0, 0x0) 08:51:17 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="cf2b5d", 0x3}}, 0x0) [ 991.847174][T32136] ieee802154 phy0 wpan0: encryption failed: -22 08:51:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b40)={'ip6gre0\x00', 0x0}) [ 991.906952][T32140] ieee802154 phy0 wpan0: encryption failed: -22 08:51:17 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, 0x0, 0x0, 0x0) 08:51:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x3, 0x0, &(0x7f0000000b40)) 08:51:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:51:17 executing program 0: getresuid(&(0x7f00000001c0), &(0x7f0000000000), 0x0) 08:51:17 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, 0x0, 0x0, 0x0) [ 992.249900][ T9666] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 992.508409][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 992.630664][ T9666] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 992.750795][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.757160][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.809911][ T9666] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 992.820958][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.829178][ T9666] usb 6-1: Product: syz [ 992.836208][ T9666] usb 6-1: Manufacturer: syz [ 992.841413][ T9666] usb 6-1: SerialNumber: syz [ 992.852884][ T9666] usb 6-1: config 0 descriptor?? [ 992.898187][ T9666] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 993.098160][T32142] udc-core: couldn't find an available UDC or it's busy [ 993.106617][T32142] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 993.131346][T29242] usb 6-1: USB disconnect, device number 107 08:51:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b0001000000000904000001030000000905", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:51:18 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) 08:51:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "6070be2a28fa4e22c01e105bcf558ef40b37089738ae82bd2bc49e85925000"}}}, 0x27) 08:51:18 executing program 1: io_uring_setup(0x0, 0x0) 08:51:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x70}}, 0x0) 08:51:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x10001, 0x0, &(0x7f0000000080)) 08:51:19 executing program 4: clock_gettime(0x0, &(0x7f0000004a40)) clock_getres(0x3, &(0x7f0000000040)) 08:51:19 executing program 3: openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) 08:51:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@hl={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) 08:51:19 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x3f, 0x40) 08:51:19 executing program 2: openat$ipvs(0xffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) [ 994.129865][ T9771] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 994.429926][ T9771] usb 6-1: Using ep0 maxpacket: 16 [ 994.570094][ T9771] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xAF, skipping [ 994.760068][ T9771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 994.770088][ T9771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.778185][ T9771] usb 6-1: Product: syz [ 994.785338][ T9771] usb 6-1: Manufacturer: syz [ 994.791188][ T9771] usb 6-1: SerialNumber: syz [ 994.804764][ T9771] usb 6-1: config 0 descriptor?? [ 994.872863][ T9771] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 995.089857][T32188] udc-core: couldn't find an available UDC or it's busy [ 995.097349][T32188] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 995.125621][T29242] usb 6-1: USB disconnect, device number 108 08:51:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b0001000000000904000001030000000905", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:20 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000080)="c8c9221824353f", 0x7, 0x6}], 0x0, 0x0) 08:51:20 executing program 4: openat$incfs(0xffffffffffffffff, &(0x7f0000000dc0)='.log\x00', 0x0, 0x0) 08:51:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000800)) 08:51:20 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 08:51:20 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 08:51:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8920, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 995.724705][T32230] FAT-fs (loop3): bogus number of reserved sectors [ 995.733258][T32230] FAT-fs (loop3): Can't find a valid FAT filesystem 08:51:21 executing program 2: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$tcp_mem(r0, &(0x7f0000000080)={0xc937}, 0x48) 08:51:21 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0]) [ 995.803838][T32230] FAT-fs (loop3): bogus number of reserved sectors [ 995.839520][T32230] FAT-fs (loop3): Can't find a valid FAT filesystem 08:51:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 08:51:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000050020000ffff8000000091"]) 08:51:21 executing program 4: clock_gettime(0xc11c61eebc209ac3, 0x0) [ 996.109875][ T9763] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 996.382488][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 996.520777][ T9763] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xAF, skipping [ 996.700025][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 996.709146][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.740053][ T9763] usb 6-1: Product: syz [ 996.744244][ T9763] usb 6-1: Manufacturer: syz [ 996.748872][ T9763] usb 6-1: SerialNumber: syz [ 996.767602][ T9763] usb 6-1: config 0 descriptor?? [ 996.833035][ T9763] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 997.046265][T32239] udc-core: couldn't find an available UDC or it's busy [ 997.059387][T32239] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 997.115966][ T9771] usb 6-1: USB disconnect, device number 109 08:51:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b0001000000000904000001030000000905", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:22 executing program 1: clock_gettime(0x1, &(0x7f0000000440)) 08:51:22 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd']) 08:51:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='nonumtail=0,iocharset=iso8859-9,gid=', @ANYRESHEX]) 08:51:22 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c000, 0x0) 08:51:22 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x12141) io_setup(0xffff, &(0x7f0000000240)) eventfd(0x0) [ 997.717229][T32299] fuse: Bad value for 'fd' [ 997.752496][T32299] fuse: Bad value for 'fd' 08:51:23 executing program 3: syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000700)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 08:51:23 executing program 4: r0 = eventfd(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 08:51:23 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0x200}], 0x0, &(0x7f0000001280)) 08:51:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x2c0, 0x2c0, 0x1d8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @local, [], [], 'caif0\x00', 'veth1_macvtap\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@ah={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x39}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@private, [], @ipv6=@private1}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], [], 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) [ 998.002802][T32313] loop1: detected capacity change from 0 to 1 [ 998.032709][T32313] F2FS-fs (loop1): Unable to read 1th superblock 08:51:23 executing program 0: syz_open_dev$mouse(&(0x7f0000000340), 0x7fffffff, 0x288080) [ 998.048956][T32313] F2FS-fs (loop1): Unable to read 2th superblock [ 998.069823][ T9763] usb 6-1: new high-speed USB device number 110 using dummy_hcd 08:51:23 executing program 3: clock_gettime(0x3, &(0x7f0000001000)) [ 998.120595][T32324] x_tables: duplicate underflow at hook 2 [ 998.177843][T32313] loop1: detected capacity change from 0 to 1 [ 998.186240][T32313] F2FS-fs (loop1): Unable to read 1th superblock [ 998.194006][T32313] F2FS-fs (loop1): Unable to read 2th superblock [ 998.360190][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 998.514072][ T9763] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xAF, skipping [ 998.710011][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 998.719126][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.749948][ T9763] usb 6-1: Product: syz [ 998.754600][ T9763] usb 6-1: Manufacturer: syz [ 998.769804][ T9763] usb 6-1: SerialNumber: syz [ 998.779381][ T9763] usb 6-1: config 0 descriptor?? [ 998.872926][ T9763] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 999.096229][T32305] udc-core: couldn't find an available UDC or it's busy [ 999.103621][T32305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 999.138977][ T9763] usb 6-1: USB disconnect, device number 110 08:51:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x206}]}) 08:51:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) accept4$inet6(r1, 0x0, 0x0, 0x0) 08:51:24 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 08:51:24 executing program 2: sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) 08:51:24 executing program 1: r0 = fork() prlimit64(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 999.757317][T32361] fuse: Bad value for 'fd' 08:51:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)='%', 0x1}], 0x1}, 0x0) [ 999.792918][T32361] fuse: Bad value for 'fd' 08:51:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x3, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 08:51:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x40086602, 0x0) 08:51:25 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x9}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 08:51:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002f40)={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f000000b780)={0x0, @generic={0x0, "06c79b22b91a160f6619bd5036b0"}, @qipcrtr, @phonet}) [ 1000.149954][T29242] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1000.379889][ T9666] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1000.410017][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 1000.539946][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1000.568732][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1000.740757][ T9666] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1000.761096][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1000.771519][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.779542][T29242] usb 6-1: Product: syz [ 1000.799907][T29242] usb 6-1: Manufacturer: syz [ 1000.804560][T29242] usb 6-1: SerialNumber: syz [ 1000.854262][T29242] usb 6-1: config 0 descriptor?? [ 1000.912301][T29242] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1000.929299][ T9666] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1000.930483][T29242] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input65 [ 1000.946962][ T9666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.969168][ T9666] usb 2-1: Product: syz [ 1000.975505][ T9666] usb 2-1: Manufacturer: syz [ 1000.982589][ T9666] usb 2-1: SerialNumber: syz [ 1001.129470][T29242] usb 6-1: USB disconnect, device number 111 [ 1001.135643][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1001.135684][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1001.163630][T29242] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1001.234830][T32380] udc-core: couldn't find an available UDC or it's busy [ 1001.241997][T32380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1001.299239][ T9666] usb 2-1: USB disconnect, device number 8 08:51:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:27 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x0) 08:51:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x3, 0x0, [{0x1}, {0x40000001, 0x6, 0x5}, {}]}) 08:51:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='nonumtail=0,iocharset=iso8859-9,gid=']) 08:51:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8929, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8no}]}) [ 1001.802962][T32433] FAT-fs (loop3): Unrecognized mount option "gid=" or missing value [ 1001.892527][T32433] FAT-fs (loop3): Unrecognized mount option "gid=" or missing value [ 1001.994762][T32451] FAT-fs (loop0): bogus number of reserved sectors [ 1002.032741][T29242] usb 2-1: new high-speed USB device number 9 using dummy_hcd 08:51:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[], 0x14}}, 0x0) [ 1002.041442][T32451] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1002.100287][T32451] FAT-fs (loop0): bogus number of reserved sectors [ 1002.115096][T32451] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1002.139962][ T9763] usb 6-1: new high-speed USB device number 112 using dummy_hcd 08:51:27 executing program 4: fork() fork() waitid(0x0, 0x0, 0x0, 0x2, 0x0) 08:51:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8991, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1002.419816][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 1002.441522][T29242] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1002.550861][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1002.562168][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1002.671308][T29242] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1002.689828][T29242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.698009][T29242] usb 2-1: Product: syz [ 1002.720536][T29242] usb 2-1: Manufacturer: syz [ 1002.725189][T29242] usb 2-1: SerialNumber: syz [ 1002.790720][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1002.809723][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.817941][ T9763] usb 6-1: Product: syz [ 1002.822763][ T9763] usb 6-1: Manufacturer: syz [ 1002.827390][ T9763] usb 6-1: SerialNumber: syz [ 1002.875680][ T9763] usb 6-1: config 0 descriptor?? [ 1002.942145][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1002.970290][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input66 [ 1003.046319][T29242] usb 2-1: USB disconnect, device number 9 08:51:28 executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x738, 0x1f0, 0x1f0, 0xffffffff, 0xf0, 0x0, 0x668, 0x668, 0xffffffff, 0x668, 0x668, 0x5, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'wlan0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @gre_key}}}, {{@ipv6={@private2, @remote, [], [], 'lo\x00', 'batadv0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @private0, @mcast2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private0, @empty, @private2, @remote, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}, @common=@inet=@socket2={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private2, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @empty, @private0, @mcast1, @remote, @empty, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @mcast1, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@local, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffff1e) 08:51:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:51:28 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x2, {0x0, r0}, 0x4, 0xa}, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x19e) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0xabe7f47dfbd821f1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x82400, 0x0) syz_open_dev$mouse(&(0x7f0000000600), 0x0, 0x4400) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{&(0x7f0000000740)='j', 0x1, 0x4d5f}], 0x1100040, &(0x7f00000007c0)={[{@dots}], [{@permit_directio}]}) [ 1003.160462][ T9763] usb 6-1: USB disconnect, device number 112 [ 1003.179760][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1003.202617][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1003.312116][T32503] loop3: detected capacity change from 0 to 77 [ 1003.460497][T32518] loop3: detected capacity change from 0 to 77 08:51:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:29 executing program 3: rt_sigprocmask(0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 08:51:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x50, 0x0, [{0x1}, {0x7, 0x0, 0x2}]}) 08:51:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x14}}, 0x0) 08:51:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8948, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x80108907, 0x0) 08:51:29 executing program 3: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)) 08:51:29 executing program 0: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0) 08:51:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8910, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq}]}}) [ 1004.136802][T32548] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 1004.211383][T32556] fuse: Invalid rootmode 08:51:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x10000000) [ 1004.235460][T32548] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 1004.250115][ T22] usb 6-1: new high-speed USB device number 113 using dummy_hcd 08:51:29 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xc4, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x969}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}}, 0xc081) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1004.549911][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 1004.669894][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1004.689743][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1004.923678][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1004.949747][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.957832][ T22] usb 6-1: Product: syz [ 1004.979745][ T22] usb 6-1: Manufacturer: syz [ 1004.984395][ T22] usb 6-1: SerialNumber: syz [ 1005.030567][ T22] usb 6-1: config 0 descriptor?? [ 1005.072239][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1005.079637][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input67 [ 1005.286959][ T9666] usb 6-1: USB disconnect, device number 113 [ 1005.309741][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1005.320071][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:51:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502"], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x1}, {0x40000001, 0x6, 0x5}]}) 08:51:31 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x343, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9}}, [{}]}}}]}}]}}, 0x0) 08:51:31 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x301200, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x8}, 0x0, 0x0) 08:51:31 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xc4, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x969}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}}, 0xc081) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:51:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) 08:51:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 08:51:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="5000000000000000010000000000000007"]) 08:51:31 executing program 3: getpid() sched_setattr(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 08:51:31 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xc4, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x969}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}}, 0xc081) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1006.230029][T29242] usb 3-1: new high-speed USB device number 8 using dummy_hcd 08:51:31 executing program 3: getpid() sched_setattr(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 08:51:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000060, 0x0) [ 1006.298944][T32616] fuse: blksize only supported for fuseblk [ 1006.329870][ T22] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1006.499979][T29242] usb 3-1: Using ep0 maxpacket: 8 [ 1006.601213][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 1006.621307][T29242] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1006.729993][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1006.746654][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1006.840921][T29242] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 1006.859921][T29242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.879812][T29242] usb 3-1: Product: syz [ 1006.884084][T29242] usb 3-1: Manufacturer: syz [ 1006.888706][T29242] usb 3-1: SerialNumber: syz [ 1006.943521][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1006.960450][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.968558][ T22] usb 6-1: Product: syz [ 1006.975463][ T22] usb 6-1: Manufacturer: syz [ 1006.981244][ T22] usb 6-1: SerialNumber: syz [ 1007.009273][ T22] usb 6-1: config 0 descriptor?? [ 1007.081927][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1007.097922][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input68 [ 1007.190548][T29242] usbhid 3-1:1.0: can't add hid device: -22 [ 1007.197982][T29242] usbhid: probe of 3-1:1.0 failed with error -22 [ 1007.234430][T29242] usb 3-1: USB disconnect, device number 8 [ 1007.287559][T32607] udc-core: couldn't find an available UDC or it's busy [ 1007.305900][T32607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1007.369638][ T9666] usb 6-1: USB disconnect, device number 114 [ 1007.379778][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1007.386918][ T9666] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:51:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502"], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:33 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xc4, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x969}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}}, 0xc081) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1007.929812][ T9771] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1008.219806][ T9771] usb 3-1: Using ep0 maxpacket: 8 [ 1008.269892][T29242] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1008.363036][ T9771] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1008.509921][T29242] usb 6-1: Using ep0 maxpacket: 16 [ 1008.550026][ T9771] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 1008.559124][ T9771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.567294][ T9771] usb 3-1: Product: syz [ 1008.571861][ T9771] usb 3-1: Manufacturer: syz [ 1008.576489][ T9771] usb 3-1: SerialNumber: syz [ 1008.636383][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1008.654681][T29242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1008.840487][T29242] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1008.849591][T29242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.878071][T29242] usb 6-1: Product: syz [ 1008.882768][ T9771] usbhid 3-1:1.0: can't add hid device: -22 08:51:34 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffa]}, &(0x7f00000000c0), 0x8) 08:51:34 executing program 3: getpid() sched_setattr(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 08:51:34 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[{&(0x7f0000000080)="c8", 0x1}, {&(0x7f0000000140)="9e", 0x1}, {&(0x7f0000000280)="98", 0x1, 0x100000000}, {&(0x7f0000000380)="1d", 0x1}, {&(0x7f0000000580)="ad", 0x1}], 0x0, 0x0) 08:51:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 08:51:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8922, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1008.890100][ T9771] usbhid: probe of 3-1:1.0 failed with error -22 [ 1008.929930][T29242] usb 6-1: Manufacturer: syz [ 1008.950188][T29242] usb 6-1: SerialNumber: syz [ 1008.971332][ T9771] usb 3-1: USB disconnect, device number 9 [ 1009.008717][T29242] usb 6-1: config 0 descriptor?? 08:51:34 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x12141) [ 1009.056553][T32694] loop0: detected capacity change from 0 to 264192 [ 1009.082148][T29242] cm109 6-1:0.0: invalid payload size 0, expected 4 08:51:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {0x80000001, 0x4, 0x1}]}) [ 1009.102370][T29242] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input69 08:51:34 executing program 3: getpid() sched_setattr(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) [ 1009.199607][T32694] loop0: detected capacity change from 0 to 264192 08:51:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0x1000}], 0x0, &(0x7f0000001280)={[{@inline_xattr_size}, {@whint_mode_off}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@pcr}, {@permit_directio}, {@subj_role}]}) [ 1009.275382][T32712] fuse: blksize only supported for fuseblk [ 1009.288898][T32670] udc-core: couldn't find an available UDC or it's busy [ 1009.299549][T32670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 08:51:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8922, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1009.354715][T29242] usb 6-1: USB disconnect, device number 115 [ 1009.369755][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 1009.383599][T29242] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1009.426818][T32718] loop3: detected capacity change from 0 to 8 [ 1009.481043][T32718] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0xb8913667) [ 1009.491073][T32718] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1009.506064][T32718] F2FS-fs (loop3): Unable to read 2th superblock [ 1009.590250][T32718] loop3: detected capacity change from 0 to 8 [ 1009.601714][T32718] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0xb8913667) [ 1009.637445][T32718] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1009.680538][T32718] F2FS-fs (loop3): Unable to read 2th superblock 08:51:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10002100010200090502"], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8993, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x4}]]}]}, 0x24}}, 0x0) 08:51:35 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 08:51:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8922, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:35 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 08:51:35 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x343, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 08:51:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x4}]}, 0x20}}, 0x0) 08:51:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00'}) 08:51:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8922, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8983, 0x0) [ 1010.259914][ T9773] usb 4-1: new high-speed USB device number 18 using dummy_hcd 08:51:35 executing program 2: syz_open_dev$vcsa(0x0, 0x6, 0x12141) io_setup(0xffff, &(0x7f0000000240)) [ 1010.380413][T23997] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1010.422480][ T9771] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1010.649919][T23997] usb 6-1: Using ep0 maxpacket: 16 [ 1010.681253][ T9771] usb 5-1: Using ep0 maxpacket: 8 [ 1010.730807][ T9773] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1010.800706][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1010.819999][T23997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1010.830483][ T9771] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1011.010131][ T9773] usb 4-1: string descriptor 0 read error: -22 [ 1011.016538][ T9771] usb 5-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 1011.026633][T23997] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1011.036266][ T9773] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1011.047870][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.056749][ T9771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.065595][ T9773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.074664][T23997] usb 6-1: Product: syz [ 1011.079157][ T9771] usb 5-1: Product: syz [ 1011.085549][T23997] usb 6-1: Manufacturer: syz [ 1011.093130][ T9771] usb 5-1: Manufacturer: syz [ 1011.102779][T23997] usb 6-1: SerialNumber: syz [ 1011.107825][ T9771] usb 5-1: SerialNumber: syz [ 1011.121208][T23997] usb 6-1: config 0 descriptor?? [ 1011.182654][ T9771] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1011.193548][T23997] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1011.209463][T23997] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70 [ 1011.359693][T23997] usb 4-1: USB disconnect, device number 18 [ 1011.391676][ T9771] usb 5-1: USB disconnect, device number 10 [ 1011.399174][T32766] udc-core: couldn't find an available UDC or it's busy [ 1011.411305][T32766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1011.452389][T29242] usb 6-1: USB disconnect, device number 116 [ 1011.459860][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1011.466863][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1011.477617][T29242] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:51:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f901", 0xffffffffffffff1d}, {0x0}], 0x0, &(0x7f0000000200)={[{@fat=@umask}]}) 08:51:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x1}, {0x40000001, 0x0, 0x5}]}) 08:51:37 executing program 2: r0 = eventfd(0x0) r1 = creat(0x0, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x10, &(0x7f00000005c0)={0x0}}, 0x10) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000200)="8bba21c4faf54a663b49e9db299328a3dc6be3f80de6a65f5277ee51b4385c5134be85cbabfae12efbddf15eab32ae9d9c369587d2981cdfd8dab807dbd7553e54405d8954c4d4d87ff74274b5037eb58092c2c1acb260f7b1ffd712f62f43d52a8949d349a7df702243c97976b1d59a6a6d128ef61356844209e755dcf85fa4eedd6808ae74d10cd509948627572f2e72b1f404ba43789d48d8823712fd4dc20459a4d786a1efd5c2f28401261e1f92940d6e7d844b4030acc98767855bb205a7bbbe0b8f6dbae66ed8b46afa62b2d8c02a987ea5a3d8b620ceceebbc00a00a7b0b2385ce6bfffd5303867f199cff0196540f11bcd8", 0xf6, 0x3ff, 0x0, 0x2}, &(0x7f0000000340)) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x20040) syz_open_dev$vcsn(&(0x7f0000000080), 0x3ff, 0x200) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r0, 0x2, 0xc709, r0}) fork() r3 = fork() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1d, 0x0, @tid=r3}, &(0x7f00000001c0)) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf7057bc4a7ddc0f6200fd00000000000400ffff00000a0001007770616e3000000014003000693e02e895e1d1d02e85c5c92f6152d614003000cb6f9deeb6d19a5d5db735b931eec22b"], 0x58}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000050) r4 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) connect$bt_rfcomm(r4, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f0000000380)=""/76, &(0x7f0000000400)=0x4c) [ 1012.159767][ T22] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1012.189851][T29242] usb 5-1: new high-speed USB device number 11 using dummy_hcd 08:51:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) [ 1012.430016][T29242] usb 5-1: Using ep0 maxpacket: 8 [ 1012.520037][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1012.550643][T29242] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1012.740742][ T9763] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1012.752047][T29242] usb 5-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 1012.770140][T29242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.814541][T29242] usb 5-1: Product: syz [ 1012.820649][ T22] usb 4-1: string descriptor 0 read error: -22 [ 1012.828595][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1012.850427][T29242] usb 5-1: Manufacturer: syz [ 1012.872173][T29242] usb 5-1: SerialNumber: syz [ 1012.884758][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:51:38 executing program 3: syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x24cc1) [ 1012.952815][T29242] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1012.986374][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 1012.999868][ T22] usb 4-1: can't set config #1, error -71 [ 1013.020428][ T22] usb 4-1: USB disconnect, device number 19 [ 1013.110545][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1013.159718][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 08:51:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x80}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 08:51:38 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[{&(0x7f0000000380)="95", 0x1, 0xa2c8}, {&(0x7f00000003c0)="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", 0xf3f, 0xc2}], 0x0, 0x0) 08:51:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x1}, {0x80000000, 0x0, 0x1}]}) 08:51:38 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq}]}}) [ 1013.350789][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1013.375117][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.394484][ T411] loop2: detected capacity change from 0 to 162 08:51:38 executing program 3: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 1013.406482][ T412] fuse: Unknown parameter 'uid' [ 1013.411854][ T9763] usb 6-1: Product: syz [ 1013.416054][ T9763] usb 6-1: Manufacturer: syz [ 1013.431064][ T9763] usb 6-1: SerialNumber: syz [ 1013.447276][ T9763] usb 6-1: config 0 descriptor?? [ 1013.492282][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1013.509789][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input73 [ 1013.550810][ T411] loop2: detected capacity change from 0 to 162 08:51:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f00000001c0)) [ 1013.697537][ T382] udc-core: couldn't find an available UDC or it's busy [ 1013.724127][ T382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1013.752352][T23997] usb 5-1: USB disconnect, device number 11 [ 1013.754109][ T9763] usb 6-1: USB disconnect, device number 117 [ 1013.769724][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1013.778716][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1013.802715][ T9763] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:51:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x77359400}}, 0x18) 08:51:39 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{&(0x7f0000000740)='j', 0x1, 0x4d5f}], 0x0, 0x0) 08:51:39 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[], [{@seclabel}]}) 08:51:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8914, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x80086601, 0x0) [ 1014.482711][ T458] loop2: detected capacity change from 0 to 77 08:51:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8941, 0x0) 08:51:39 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x343, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, 0x0) 08:51:40 executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x1}, {0x80000000, 0x0, 0x2}]}) 08:51:40 executing program 1: syz_mount_image$msdos(&(0x7f00000006c0), 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)) 08:51:40 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1}, @info_request}}}}, 0x0) [ 1014.929818][ T9763] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1015.070354][T29242] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1015.179949][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 1015.300655][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1015.329817][T29242] usb 1-1: Using ep0 maxpacket: 8 [ 1015.337696][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1015.450640][T29242] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1015.510035][ T9763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1015.519299][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.539494][ T9763] usb 6-1: Product: syz [ 1015.545711][ T9763] usb 6-1: Manufacturer: syz [ 1015.561020][ T9763] usb 6-1: SerialNumber: syz [ 1015.581749][ T9763] usb 6-1: config 0 descriptor?? [ 1015.622145][ T9763] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1015.641685][T29242] usb 1-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 1015.662949][T29242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.673665][ T9763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input74 [ 1015.699857][T29242] usb 1-1: Product: syz [ 1015.704077][T29242] usb 1-1: Manufacturer: syz [ 1015.708688][T29242] usb 1-1: SerialNumber: syz [ 1015.813576][T29242] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1015.845618][ T468] udc-core: couldn't find an available UDC or it's busy [ 1015.874883][ T468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1015.926525][ T322] usb 6-1: USB disconnect, device number 118 [ 1015.939761][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 1015.947079][ T322] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1016.018458][T29242] usb 1-1: USB disconnect, device number 8 08:51:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x0, 0x0, 0x20) 08:51:41 executing program 2: socket$inet6(0xa, 0x0, 0xba17) 08:51:41 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x1}, {&(0x7f0000000280)="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", 0x1000}], 0x10000, &(0x7f0000001280)={[], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@pcr}, {@seclabel}, {@euid_eq}]}) 08:51:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x14, 0x0, 0x20) 08:51:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3cd001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8040) accept(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socket(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2001, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x40) 08:51:41 executing program 1: socketpair(0x1e, 0x0, 0x401, &(0x7f0000000000)) [ 1016.640881][ T536] loop4: detected capacity change from 0 to 8 [ 1016.704470][ T536] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0xb8913667) [ 1016.747031][ T536] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1016.772436][ T536] F2FS-fs (loop4): Unable to read 2th superblock [ 1016.809901][ T322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1016.852114][ T536] loop4: detected capacity change from 0 to 8 [ 1016.889838][ T536] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0xb8913667) [ 1016.898828][ T536] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1016.948375][ T536] F2FS-fs (loop4): Unable to read 2th superblock [ 1016.991065][ T8] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1017.070482][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 1017.212272][ T322] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1017.279869][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1017.400710][ T322] usb 1-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 1017.410078][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1017.441280][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.449335][ T322] usb 1-1: Product: syz [ 1017.470232][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1017.543869][ T322] usb 1-1: Manufacturer: syz [ 1017.548653][ T322] usb 1-1: SerialNumber: syz [ 1017.623335][ T322] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 08:51:43 executing program 0: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x20000051) inotify_rm_watch(0xffffffffffffffff, r0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="9ad45e5164f97bd6730551a36494e85e1f605a520dc8933d6dafdf21ad1ff22933f782a915a84d6f5935b9e81dd999da6fabaa6263201ae07405ebfcf3f965a77343cd6d1c1dc5da0d10b35de227232631bae9c9876be712306bb703ce51ea141ad2c40dc2752cf705b400d64df1b3961f62d41f51bf7c7eb200bf01d3c525bcd53f9ce3085621eb7ea069a4d19824133d5329d7bf0867ca519f479ad4cd25a17b84f540196ea5c6ec9c32f8c93b9eb25769", 0xfffffffffffffedb, 0xc8c0, 0x0, 0x0) 08:51:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x3, 0x2, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 08:51:43 executing program 1: syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}, [{{0x9, 0x5, 0x82, 0x2, 0x20}}]}}}]}}]}}, 0x0) 08:51:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 08:51:43 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3cd001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8040) accept(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socket(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2001, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x40) [ 1017.740643][ T8] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1017.759803][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.767843][ T8] usb 6-1: Product: syz [ 1017.768978][T29242] usb 1-1: USB disconnect, device number 9 [ 1017.792362][ T8] usb 6-1: Manufacturer: syz [ 1017.797020][ T8] usb 6-1: SerialNumber: syz [ 1017.878468][ T8] usb 6-1: config 0 descriptor?? [ 1017.961623][ T8] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1017.988116][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input75 [ 1018.167265][ T538] udc-core: couldn't find an available UDC or it's busy [ 1018.188315][ T538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1018.209902][ T322] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1018.257267][ T8] usb 6-1: USB disconnect, device number 119 [ 1018.279786][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1018.286795][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1018.368065][ T8] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1018.651120][ T322] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1018.889917][ T322] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1018.899026][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:51:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:44 executing program 2: eventfd(0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x4) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) io_setup(0xffff, &(0x7f0000000240)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 08:51:44 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$tcp_mem(r0, &(0x7f0000000080), 0x48) 08:51:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x258, 0x0, 0x80ffff02000000}]}) 08:51:44 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3cd001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8040) accept(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socket(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2001, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x40) [ 1018.939815][ T322] usb 2-1: Product: syz [ 1018.944099][ T322] usb 2-1: Manufacturer: syz [ 1018.948716][ T322] usb 2-1: SerialNumber: syz [ 1019.021737][ T580] raw-gadget gadget: fail, usb_ep_enable returned -22 08:51:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts_2292={{0x14}}, @pktinfo={{0x20, 0x29, 0x32, {@empty}}}], 0x34}}], 0x1, 0x0) 08:51:44 executing program 4: pselect6(0x40, &(0x7f0000000040)={0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) [ 1019.281939][T29242] usb 2-1: USB disconnect, device number 10 08:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) [ 1019.449775][ T322] usb 6-1: new high-speed USB device number 120 using dummy_hcd 08:51:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x89a0, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1019.739874][ T322] usb 6-1: Using ep0 maxpacket: 16 [ 1019.890707][ T322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1019.951521][ T322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1020.200734][ T322] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1020.210463][ T8] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1020.230892][ T322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.238946][ T322] usb 6-1: Product: syz [ 1020.260945][ T322] usb 6-1: Manufacturer: syz [ 1020.266975][ T322] usb 6-1: SerialNumber: syz [ 1020.303804][ T322] usb 6-1: config 0 descriptor?? [ 1020.342130][ T322] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1020.349550][ T322] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76 [ 1020.555410][ T627] udc-core: couldn't find an available UDC or it's busy [ 1020.570236][ T627] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1020.603110][ T322] usb 6-1: USB disconnect, device number 120 [ 1020.619841][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 1020.628804][ T322] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1020.652308][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 08:51:46 executing program 1: r0 = eventfd(0x0) fallocate(r0, 0x0, 0x0, 0x6) 08:51:46 executing program 2: socket$inet6(0xa, 0x5, 0x1c) 08:51:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) timerfd_gettime(r0, 0x0) [ 1020.939933][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1020.939979][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.940014][ T8] usb 2-1: Product: syz [ 1020.959975][ T8] usb 2-1: can't set config #1, error -71 [ 1020.961733][ T8] usb 2-1: USB disconnect, device number 11 08:51:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40a20000}, 0xc, &(0x7f0000000500)={0x0}}, 0x0) 08:51:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3cd001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8040) accept(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socket(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2001, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x40) 08:51:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x26b, 0x0, 0x80ffff02000000}]}) 08:51:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x88025}}, 0x50) 08:51:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x3, 0x0) openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) 08:51:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x50, 0x0, [{0x1}, {0xd, 0x0, 0x2}]}) 08:51:46 executing program 1: socket$inet(0x2, 0x2, 0xff) [ 1021.790294][ T22] usb 6-1: new high-speed USB device number 121 using dummy_hcd 08:51:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0x26}]}, 0x20}}, 0x0) 08:51:47 executing program 0: socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000180)={0x9}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1022.050060][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 1022.170937][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1022.223280][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 08:51:47 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@blksize}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq}]}}) [ 1022.462811][ T741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1022.540005][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1022.554124][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.577476][ T744] fuse: blksize only supported for fuseblk [ 1022.583570][ T22] usb 6-1: Product: syz [ 1022.601214][ T22] usb 6-1: Manufacturer: syz [ 1022.624759][ T22] usb 6-1: SerialNumber: syz [ 1022.657327][ T22] usb 6-1: config 0 descriptor?? [ 1022.702246][ T22] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1022.730489][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input77 [ 1022.908291][ T711] udc-core: couldn't find an available UDC or it's busy [ 1022.926177][ T711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1022.950107][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1022.961023][ T22] usb 6-1: USB disconnect, device number 121 [ 1022.975261][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 1022.984574][ T22] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 08:51:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x1}, {0x80000008, 0x0, 0x3}]}) 08:51:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2087080, &(0x7f00000012c0)) 08:51:48 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4da, 0x104d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4}}}]}}]}}, 0x0) 08:51:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x89a1, 0x0) 08:51:48 executing program 3: io_setup(0xffff, &(0x7f0000000240)) 08:51:49 executing program 2: socketpair(0x5, 0x0, 0x0, &(0x7f0000000000)) 08:51:49 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x22902, 0x0) 08:51:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000030000000700000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000020000000000000000000000000000000010000000000000000000000000000000000000000000000000000a5ba70ddff534ea70000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 08:51:49 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x60000, 0x0) [ 1023.979943][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd 08:51:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x891f, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x89a3, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1024.089993][ T322] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1024.159809][ T797] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1024.229782][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 1024.350717][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1024.351110][ T322] usb 6-1: Using ep0 maxpacket: 16 [ 1024.541287][ T322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1024.550687][ T22] usb 5-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 1024.558552][ T322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1024.573363][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.601077][ T22] usb 5-1: Product: syz [ 1024.618486][ T22] usb 5-1: Manufacturer: syz [ 1024.636008][ T22] usb 5-1: SerialNumber: syz [ 1024.702799][ T22] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1024.810651][ T322] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1024.824788][ T322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.842648][ T322] usb 6-1: Product: syz [ 1024.851769][ T322] usb 6-1: Manufacturer: syz [ 1024.862450][ T322] usb 6-1: SerialNumber: syz [ 1024.878498][ T322] usb 6-1: config 0 descriptor?? [ 1024.920704][ T9763] usb 5-1: USB disconnect, device number 12 [ 1024.951774][ T322] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1024.959622][ T322] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input78 [ 1025.156944][ T785] udc-core: couldn't find an available UDC or it's busy [ 1025.183157][ T785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1025.226438][ T322] usb 6-1: USB disconnect, device number 122 [ 1025.232646][ C0] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1025.232683][ C0] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1025.270528][ T322] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1025.709965][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd 08:51:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:51 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) io_setup(0xffff, &(0x7f0000000240)) eventfd(0x0) 08:51:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8941, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1025.949926][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 1026.070620][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1026.270662][ T22] usb 5-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 1026.280003][ T2939] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1026.299881][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.337788][ T22] usb 5-1: Product: syz [ 1026.357346][ T22] usb 5-1: Manufacturer: syz [ 1026.376215][ T22] usb 5-1: SerialNumber: syz [ 1026.442789][ T22] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1026.529822][ T2939] usb 6-1: Using ep0 maxpacket: 16 08:51:51 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "df2b5b72be26cfe17e03095602c4780e"}]}}) 08:51:51 executing program 3: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x200200, 0x0) 08:51:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480)={[{@fat=@check_normal}, {@shortname_lower}], [{@subj_type={'subj_type', 0x3d, ',,-}][%@&{,\x12,$(\\'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user}]}) 08:51:51 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={[{}]}) [ 1026.604264][ T9763] usb 5-1: USB disconnect, device number 13 [ 1026.650621][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1026.705920][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1026.730517][ T855] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 1026.790457][ T857] FAT-fs (loop0): Unrecognized mount option "subj_type=" or missing value 08:51:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8949, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1026.855550][ T855] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 1026.872036][ T857] FAT-fs (loop0): Unrecognized mount option "subj_type=" or missing value [ 1026.900590][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1026.935151][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.010193][ T2939] usb 6-1: Product: syz [ 1027.014905][ T2939] usb 6-1: Manufacturer: syz [ 1027.022984][ T2939] usb 6-1: SerialNumber: syz [ 1027.043757][ T2939] usb 6-1: config 0 descriptor?? [ 1027.082491][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1027.144839][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input79 [ 1027.193399][ T9763] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1027.314461][ T840] udc-core: couldn't find an available UDC or it's busy [ 1027.331119][ T840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1027.386306][ T2939] usb 6-1: USB disconnect, device number 123 [ 1027.399772][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -2 [ 1027.413848][ T2939] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1027.640599][ T9763] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1027.841047][ T9763] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1027.879757][ T9763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.887816][ T9763] usb 5-1: Product: syz [ 1027.929870][ T9763] usb 5-1: Manufacturer: syz [ 1027.934536][ T9763] usb 5-1: SerialNumber: syz [ 1028.196359][ T9763] usb 5-1: USB disconnect, device number 14 08:51:53 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}, {@measure}]}}) 08:51:53 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}}) 08:51:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x4020940d, 0x0) 08:51:53 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) 08:51:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) [ 1028.612002][ T913] fuse: Invalid rootmode 08:51:54 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) [ 1028.800005][ T9763] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1028.819964][ T9771] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1028.819969][ T2939] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1028.989874][T29242] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1029.059751][ T2939] usb 6-1: Using ep0 maxpacket: 16 [ 1029.172558][ T9763] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1029.186535][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1029.220245][ T2939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1029.269952][ T9763] usb 4-1: language id specifier not provided by device, defaulting to English [ 1029.341813][ T9771] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1029.400212][ T2939] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1029.409309][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.420467][ T2939] usb 6-1: Product: syz [ 1029.424806][ T2939] usb 6-1: Manufacturer: syz [ 1029.431353][ T2939] usb 6-1: SerialNumber: syz [ 1029.446849][ T2939] usb 6-1: config 0 descriptor?? [ 1029.452192][T29242] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1029.503005][ T2939] cm109 6-1:0.0: invalid payload size 0, expected 4 [ 1029.512809][ T2939] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input81 [ 1029.533303][ T9771] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1029.559151][ T9771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.579932][ T9771] usb 1-1: Product: syz [ 1029.585856][ T9771] usb 1-1: Manufacturer: syz [ 1029.592873][ T9771] usb 1-1: SerialNumber: syz [ 1029.632456][T29242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1029.651312][T29242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.674560][T29242] usb 5-1: Product: syz [ 1029.684971][T29242] usb 5-1: Manufacturer: syz [ 1029.695804][T29242] usb 5-1: SerialNumber: syz [ 1029.718727][ T908] udc-core: couldn't find an available UDC or it's busy 08:51:55 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x4}, 0x0) 08:51:55 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 08:51:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="1800000000000000ff"], 0x18}}], 0x1, 0x0) [ 1029.768251][ T908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1029.790573][T29242] usb 5-1: can't set config #1, error -71 [ 1029.811034][ T9763] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1029.825826][T29242] usb 5-1: USB disconnect, device number 15 [ 1029.836681][T23997] usb 6-1: USB disconnect, device number 124 [ 1029.846205][ T9763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.854415][ C1] cm109 6-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 1029.854453][ C1] cm109 6-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1029.872126][T23997] cm109 6-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1029.945311][ T9771] usb 1-1: USB disconnect, device number 10 08:51:55 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[{&(0x7f0000000080)="c8", 0x1}, {&(0x7f0000000140)="9e", 0x1}, {&(0x7f0000000280)="98", 0x1, 0x100000000}, {&(0x7f0000000380)="1d", 0x1}, {&(0x7f0000000180)='r', 0x1}, {&(0x7f0000000580)="ad", 0x1, 0xfffffffffffffeff}], 0x0, 0x0) [ 1029.989032][ T9763] usb 4-1: SerialNumber: syz 08:51:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x40049409, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) [ 1030.097143][ T961] loop2: detected capacity change from 0 to 264192 08:51:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x0, 0x80ffff}]}) [ 1030.230072][ T961] loop2: detected capacity change from 0 to 264192 [ 1030.300559][T29242] usb 4-1: USB disconnect, device number 20 [ 1030.630261][T23997] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1031.090034][ T9771] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1031.140210][T23997] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1031.362123][T23997] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1031.371437][T23997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.379455][T23997] usb 1-1: Product: syz [ 1031.384274][T23997] usb 1-1: Manufacturer: syz [ 1031.388908][T23997] usb 1-1: SerialNumber: syz 08:51:56 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 08:51:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x50, 0x0, [{0x1}, {0x40000001, 0x0, 0x2}]}) [ 1031.493806][T23997] usb 1-1: USB disconnect, device number 11 [ 1031.500858][ T9771] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1031.577180][ T9771] usb 4-1: language id specifier not provided by device, defaulting to English 08:51:56 executing program 3: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x26b, 0x0, 0x80ffff02000000}]}) 08:51:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x8913, &(0x7f0000000240)={0x0, 0x0, [], 0x0}) 08:51:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800009, 0x2010, r0, 0xffffd000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60102030109021b000100000000090400000103000000090584", @ANYBLOB="af"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000", @ANYRES64], 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4201, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000018c0)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a96741801a97ad3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 08:51:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000030000000700000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000020000000000000000000000000000000010000000000000000000000000000000000000000000000000000a5ba70ddff534ea70000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 08:51:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 08:51:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x40049409, 0x0) [ 1031.770648][ T1027] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1031.810097][ T9771] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1031.825052][ T9771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:51:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x2001, &(0x7f0000000480)) [ 1031.973040][ T9771] usb 4-1: can't set config #1, error -71 08:51:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x20004000, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f00000004c0)="9ad45e5164f97bd6730551a36494e85e1f605a520dc8933d6dafdf21ad1ff22933f782a915a84d6f5935b9e81dd999da6fabaa6263201ae07405ebfcf3f965a77343cd6d1c1dc5da0d10b35de227232631bae9c9876be712306bb703ce51ea141ad2c40dc2752cf705b400d64df1b3961f62d41f51bf7c7eb200bf01d3c525bcd53f9ce3085621eb7ea069a4d19824133d5329d7bf0867ca519f479ad4cd25a17b84f540196ea5c6ec9c32f8c93b9eb25769", 0xfffffffffffffedb, 0xc8c0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1032.058946][ T9771] usb 4-1: USB disconnect, device number 21 08:51:57 executing program 1: io_setup(0xc6a, &(0x7f0000000000)) io_setup(0x52, &(0x7f0000000140)) [ 1032.110478][ T322] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1032.401530][ T322] usb 6-1: Using ep0 maxpacket: 16 [ 1032.541102][ T322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1032.632320][ T322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 08:51:58 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) 08:51:58 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) [ 1033.052006][ T322] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1033.180451][ T322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.188497][ T322] usb 6-1: Product: syz [ 1033.311090][ T322] usb 6-1: Manufacturer: syz [ 1033.347087][ T322] usb 6-1: SerialNumber: syz [ 1167.849605][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor.3:1033] [ 1167.858363][ C0] Modules linked in: [ 1167.862451][ C0] irq event stamp: 12655533 [ 1167.866955][ C0] hardirqs last enabled at (12655532): [] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1167.878081][ C0] hardirqs last disabled at (12655533): [] sysvec_apic_timer_interrupt+0xb/0xc0 [ 1167.888729][ C0] softirqs last enabled at (11606012): [] __irq_exit_rcu+0x136/0x200 [ 1167.898526][ C0] softirqs last disabled at (11606015): [] __irq_exit_rcu+0x136/0x200 [ 1167.908981][ C0] CPU: 0 PID: 1033 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 1167.917726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.927800][ C0] RIP: 0010:unwind_next_frame+0x276/0x1ce0 [ 1167.933653][ C0] Code: 48 89 54 24 30 48 89 74 24 28 44 89 5c 24 20 e8 d0 6a 85 00 48 8b 54 24 30 48 8b 74 24 28 44 8b 5c 24 20 8b 0c 95 c4 28 dd 8e <8d> 56 01 48 b8 00 00 00 00 00 fc ff df 48 8d 3c 95 c4 28 dd 8e 49 [ 1167.953280][ C0] RSP: 0018:ffffc90000007688 EFLAGS: 00000246 [ 1167.959366][ C0] RAX: 0000000000000003 RBX: 1ffff92000000ed9 RCX: 00000000000db9bd [ 1167.967344][ C0] RDX: 000000000004284d RSI: 000000000004284d RDI: ffffffff8eedc9f8 [ 1167.975325][ C0] RBP: 0000000000000002 R08: ffffffff8bdf2980 R09: 0000000000000001 [ 1167.983322][ C0] R10: fffff52000000ef7 R11: 0000000000084087 R12: ffffc900000077a8 [ 1167.991399][ C0] R13: ffffc90000007795 R14: ffffc90000007760 R15: ffffffff85284dfe [ 1167.999396][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1168.008348][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.015037][ C0] CR2: 00007f394db069d0 CR3: 000000014e098000 CR4: 00000000001526f0 [ 1168.023027][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.031014][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.038999][ C0] Call Trace: [ 1168.042288][ C0] [ 1168.045161][ C0] ? mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1168.050970][ C0] ? deref_stack_reg+0x150/0x150 [ 1168.055927][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1168.061234][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1168.066448][ C0] arch_stack_walk+0x7d/0xe0 [ 1168.071071][ C0] ? mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1168.076727][ C0] stack_trace_save+0x8c/0xc0 [ 1168.081438][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1168.087266][ C0] ? find_held_lock+0x2d/0x110 [ 1168.092055][ C0] ? clockevents_program_event+0x141/0x370 [ 1168.097951][ C0] kasan_save_stack+0x1b/0x40 [ 1168.102709][ C0] ? kasan_save_stack+0x1b/0x40 [ 1168.107572][ C0] ? __kasan_slab_alloc+0x81/0xa0 [ 1168.112609][ C0] ? kmem_cache_alloc_node+0x333/0x590 [ 1168.118080][ C0] ? __alloc_skb+0x20b/0x340 [ 1168.122729][ C0] ? skb_copy+0x137/0x2f0 [ 1168.127070][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb17/0x1330 [ 1168.133946][ C0] ? mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1168.139611][ C0] ? mark_lock+0xef/0x17b0 [ 1168.144065][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1168.149885][ C0] ? ktime_get+0x30b/0x470 [ 1168.154323][ C0] ? lock_chain_count+0x20/0x20 [ 1168.159199][ C0] ? lapic_next_event+0x4d/0x80 [ 1168.164146][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1168.170426][ C0] ? tick_program_event+0xb4/0x140 [ 1168.175595][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1168.181870][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1168.187095][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1168.192082][ C0] ? mark_held_locks+0x9f/0xe0 [ 1168.196862][ C0] ? kasan_unpoison+0x3c/0x60 [ 1168.201561][ C0] __kasan_slab_alloc+0x81/0xa0 [ 1168.206428][ C0] kmem_cache_alloc_node+0x333/0x590 [ 1168.211733][ C0] __alloc_skb+0x20b/0x340 [ 1168.216166][ C0] skb_copy+0x137/0x2f0 [ 1168.220335][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb17/0x1330 [ 1168.227040][ C0] ? mac80211_hwsim_add_chanctx+0x220/0x220 [ 1168.232963][ C0] ? irqtime_account_irq+0x187/0x2d0 [ 1168.238268][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.244466][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.250737][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1168.257011][ C0] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 1168.262865][ C0] mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1168.268361][ C0] mac80211_hwsim_beacon_tx+0x4ba/0x910 [ 1168.273952][ C0] __iterate_interfaces+0x1e5/0x520 [ 1168.279270][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1168.284927][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1168.290585][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1168.296418][ C0] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 1168.303468][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 1168.308723][ C0] __hrtimer_run_queues+0x609/0xe40 [ 1168.313936][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1168.324186][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 1168.330279][ C0] hrtimer_run_softirq+0x17b/0x360 [ 1168.335405][ C0] __do_softirq+0x29b/0x9f6 [ 1168.339924][ C0] __irq_exit_rcu+0x136/0x200 [ 1168.344611][ C0] irq_exit_rcu+0x5/0x20 [ 1168.348891][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1168.354539][ C0] [ 1168.357470][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.363495][ C0] RIP: 0010:mm_update_next_owner+0x49b/0x7a0 [ 1168.369680][ C0] Code: 03 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 f7 02 00 00 48 8b ad d0 03 00 00 4c 8d 7d 10 4c 89 f8 48 c1 e8 03 80 3c 18 00 <0f> 85 ce 02 00 00 48 8b 45 10 48 8d a8 e8 f9 ff ff 49 39 c7 75 47 [ 1168.389410][ C0] RSP: 0018:ffffc900168dfb00 EFLAGS: 00000246 [ 1168.395492][ C0] RAX: 1ffff11007623462 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1168.403476][ C0] RDX: ffff888050cba1c0 RSI: ffffffff81449ebd RDI: ffff888089ad8820 [ 1168.411466][ C0] RBP: ffff88803b11a300 R08: 0000000000000000 R09: ffffffff8bc0a083 [ 1168.419456][ C0] R10: ffffffff81449eaf R11: 0000000000000000 R12: ffff888034e3e8c0 [ 1168.427445][ C0] R13: ffff888089ad8000 R14: 0000000000000000 R15: ffff88803b11a310 [ 1168.435436][ C0] ? mm_update_next_owner+0x45f/0x7a0 [ 1168.440828][ C0] ? mm_update_next_owner+0x46d/0x7a0 [ 1168.446219][ C0] do_exit+0xb02/0x2a60 [ 1168.450392][ C0] ? irqentry_enter+0x2b/0x50 [ 1168.455082][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1168.460478][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.466652][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1168.471874][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.478046][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1168.483153][ C0] do_group_exit+0x125/0x310 [ 1168.487783][ C0] get_signal+0x47f/0x2150 [ 1168.492262][ C0] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 1168.498166][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.504341][ C0] ? irqentry_enter+0x2b/0x50 [ 1168.509030][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1168.514441][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.520619][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1168.525841][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.532015][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1168.537063][ C0] exit_to_user_mode_prepare+0x171/0x280 [ 1168.542728][ C0] syscall_exit_to_user_mode+0x19/0x60 [ 1168.548202][ C0] do_syscall_64+0x47/0xb0 [ 1168.552632][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1168.558545][ C0] RIP: 0033:0x4665f9 [ 1168.562443][ C0] Code: Unable to access opcode bytes at RIP 0x4665cf. [ 1168.569371][ C0] RSP: 002b:00007f394db06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.577798][ C0] RAX: 0000000000000006 RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1168.585792][ C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1168.593783][ C0] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1168.601784][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1168.609779][ C0] R13: 00007ffc0c57982f R14: 00007f394db06300 R15: 0000000000022000 [ 1168.617780][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1168.624044][ C0] NMI backtrace for cpu 1 [ 1168.624055][ C0] CPU: 1 PID: 1074 Comm: kworker/u4:0 Not tainted 5.13.0-rc1-syzkaller #0 [ 1168.624067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.624078][ C0] RIP: 0010:queued_write_lock_slowpath+0x13b/0x2c0 [ 1168.624091][ C0] Code: fc ff df 49 01 c7 41 83 c6 03 41 0f b6 07 41 38 c6 7c 08 84 c0 0f 85 3e 01 00 00 8b 03 3d 00 01 00 00 74 19 f3 90 41 0f b6 07 <41> 38 c6 7c ec 84 c0 74 e8 48 89 df e8 14 57 5e 00 eb de 48 89 df [ 1168.624109][ C0] RSP: 0018:ffffc90016d5fcb8 EFLAGS: 00000006 [ 1168.624125][ C0] RAX: 0000000000000000 RBX: ffffffff8bc0a080 RCX: ffffffff815a2fbf [ 1168.624134][ C0] RDX: fffffbfff1781411 RSI: 0000000000000004 RDI: ffffffff8bc0a080 [ 1168.624145][ C0] RBP: 1ffff92002dabf98 R08: 0000000000000001 R09: ffffffff8bc0a083 [ 1168.624155][ C0] R10: fffffbfff1781410 R11: 0000000000000000 R12: ffffffff8bc0a084 [ 1168.624165][ C0] R13: 00000000000000ff R14: 0000000000000003 R15: fffffbfff1781410 [ 1168.624175][ C0] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1168.624186][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.624195][ C0] CR2: 00007f11e731c718 CR3: 000000007a711000 CR4: 00000000001526e0 [ 1168.624205][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.624215][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.624224][ C0] Call Trace: [ 1168.624230][ C0] ? queued_read_lock_slowpath+0x2a0/0x2a0 [ 1168.624237][ C0] ? lock_release+0x720/0x720 [ 1168.624244][ C0] do_raw_write_lock+0x1ce/0x280 [ 1168.624251][ C0] ? do_raw_read_unlock+0x70/0x70 [ 1168.624258][ C0] ? _raw_write_lock_irq+0x41/0x50 [ 1168.624265][ C0] do_exit+0xc4a/0x2a60 [ 1168.624271][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1168.624285][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1168.624293][ C0] ? kfree+0x1d9/0x2c0 [ 1168.624299][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1168.624306][ C0] call_usermodehelper_exec_async+0x418/0x580 [ 1168.624314][ C0] ? umh_complete+0x90/0x90 [ 1168.624321][ C0] ret_from_fork+0x1f/0x30 [ 1168.624331][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 1168.834267][ C0] CPU: 0 PID: 1033 Comm: syz-executor.3 Tainted: G L 5.13.0-rc1-syzkaller #0 [ 1168.844356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.854435][ C0] Call Trace: [ 1168.857733][ C0] [ 1168.860589][ C0] dump_stack+0x141/0x1d7 [ 1168.865091][ C0] panic+0x306/0x73d [ 1168.869023][ C0] ? __warn_printk+0xf3/0xf3 [ 1168.873637][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1168.878871][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1168.885148][ C0] ? cpumask_next+0xa4/0xf0 [ 1168.889732][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1168.895556][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1168.901291][ C0] ? printk_safe_flush+0xea/0x160 [ 1168.906387][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 1168.911732][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 1168.916962][ C0] ? softlockup_fn+0xa0/0xa0 [ 1168.921582][ C0] __hrtimer_run_queues+0x1c0/0xe40 [ 1168.926808][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1168.932817][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 1168.938906][ C0] hrtimer_interrupt+0x330/0xa00 [ 1168.943863][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 1168.950916][ C0] sysvec_apic_timer_interrupt+0x40/0xc0 [ 1168.956578][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1168.962580][ C0] RIP: 0010:unwind_next_frame+0x276/0x1ce0 [ 1168.968426][ C0] Code: 48 89 54 24 30 48 89 74 24 28 44 89 5c 24 20 e8 d0 6a 85 00 48 8b 54 24 30 48 8b 74 24 28 44 8b 5c 24 20 8b 0c 95 c4 28 dd 8e <8d> 56 01 48 b8 00 00 00 00 00 fc ff df 48 8d 3c 95 c4 28 dd 8e 49 [ 1168.988055][ C0] RSP: 0018:ffffc90000007688 EFLAGS: 00000246 [ 1168.994147][ C0] RAX: 0000000000000003 RBX: 1ffff92000000ed9 RCX: 00000000000db9bd [ 1169.002149][ C0] RDX: 000000000004284d RSI: 000000000004284d RDI: ffffffff8eedc9f8 [ 1169.010137][ C0] RBP: 0000000000000002 R08: ffffffff8bdf2980 R09: 0000000000000001 [ 1169.018125][ C0] R10: fffff52000000ef7 R11: 0000000000084087 R12: ffffc900000077a8 [ 1169.026134][ C0] R13: ffffc90000007795 R14: ffffc90000007760 R15: ffffffff85284dfe [ 1169.034140][ C0] ? mac80211_hwsim_tx_frame+0x14e/0x1e0 [ 1169.039805][ C0] ? unwind_next_frame+0x120/0x1ce0 [ 1169.045027][ C0] ? mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1169.050847][ C0] ? deref_stack_reg+0x150/0x150 [ 1169.055798][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1169.061017][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1169.066243][ C0] arch_stack_walk+0x7d/0xe0 [ 1169.070869][ C0] ? mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1169.076541][ C0] stack_trace_save+0x8c/0xc0 [ 1169.081235][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1169.087055][ C0] ? find_held_lock+0x2d/0x110 [ 1169.091836][ C0] ? clockevents_program_event+0x141/0x370 [ 1169.097676][ C0] kasan_save_stack+0x1b/0x40 [ 1169.102382][ C0] ? kasan_save_stack+0x1b/0x40 [ 1169.107263][ C0] ? __kasan_slab_alloc+0x81/0xa0 [ 1169.112321][ C0] ? kmem_cache_alloc_node+0x333/0x590 [ 1169.117800][ C0] ? __alloc_skb+0x20b/0x340 [ 1169.122405][ C0] ? skb_copy+0x137/0x2f0 [ 1169.126843][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb17/0x1330 [ 1169.133715][ C0] ? mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1169.139365][ C0] ? mark_lock+0xef/0x17b0 [ 1169.143795][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1169.149527][ C0] ? ktime_get+0x30b/0x470 [ 1169.153956][ C0] ? lock_chain_count+0x20/0x20 [ 1169.158826][ C0] ? lapic_next_event+0x4d/0x80 [ 1169.163873][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1169.170144][ C0] ? tick_program_event+0xb4/0x140 [ 1169.175280][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1169.181569][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1169.186777][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1169.191638][ C0] ? mark_held_locks+0x9f/0xe0 [ 1169.196421][ C0] ? kasan_unpoison+0x3c/0x60 [ 1169.201114][ C0] __kasan_slab_alloc+0x81/0xa0 [ 1169.205981][ C0] kmem_cache_alloc_node+0x333/0x590 [ 1169.211290][ C0] __alloc_skb+0x20b/0x340 [ 1169.215723][ C0] skb_copy+0x137/0x2f0 [ 1169.219892][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb17/0x1330 [ 1169.226604][ C0] ? mac80211_hwsim_add_chanctx+0x220/0x220 [ 1169.232517][ C0] ? irqtime_account_irq+0x187/0x2d0 [ 1169.237822][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.243997][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.250181][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1169.256445][ C0] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 1169.262280][ C0] mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1169.267756][ C0] mac80211_hwsim_beacon_tx+0x4ba/0x910 [ 1169.273318][ C0] __iterate_interfaces+0x1e5/0x520 [ 1169.278530][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1169.284265][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1169.289911][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1169.295746][ C0] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 1169.302805][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 1169.308046][ C0] __hrtimer_run_queues+0x609/0xe40 [ 1169.313273][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1169.319287][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 1169.325388][ C0] hrtimer_run_softirq+0x17b/0x360 [ 1169.330539][ C0] __do_softirq+0x29b/0x9f6 [ 1169.335085][ C0] __irq_exit_rcu+0x136/0x200 [ 1169.339791][ C0] irq_exit_rcu+0x5/0x20 [ 1169.344051][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1169.349722][ C0] [ 1169.352670][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.358680][ C0] RIP: 0010:mm_update_next_owner+0x49b/0x7a0 [ 1169.364686][ C0] Code: 03 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 f7 02 00 00 48 8b ad d0 03 00 00 4c 8d 7d 10 4c 89 f8 48 c1 e8 03 80 3c 18 00 <0f> 85 ce 02 00 00 48 8b 45 10 48 8d a8 e8 f9 ff ff 49 39 c7 75 47 [ 1169.384312][ C0] RSP: 0018:ffffc900168dfb00 EFLAGS: 00000246 [ 1169.390406][ C0] RAX: 1ffff11007623462 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1169.398401][ C0] RDX: ffff888050cba1c0 RSI: ffffffff81449ebd RDI: ffff888089ad8820 [ 1169.406398][ C0] RBP: ffff88803b11a300 R08: 0000000000000000 R09: ffffffff8bc0a083 [ 1169.414412][ C0] R10: ffffffff81449eaf R11: 0000000000000000 R12: ffff888034e3e8c0 [ 1169.422428][ C0] R13: ffff888089ad8000 R14: 0000000000000000 R15: ffff88803b11a310 [ 1169.430429][ C0] ? mm_update_next_owner+0x45f/0x7a0 [ 1169.435834][ C0] ? mm_update_next_owner+0x46d/0x7a0 [ 1169.441233][ C0] do_exit+0xb02/0x2a60 [ 1169.445405][ C0] ? irqentry_enter+0x2b/0x50 [ 1169.450110][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1169.455504][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.461675][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1169.466908][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.473080][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1169.478127][ C0] do_group_exit+0x125/0x310 [ 1169.482734][ C0] get_signal+0x47f/0x2150 [ 1169.487163][ C0] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 1169.492893][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.499182][ C0] ? irqentry_enter+0x2b/0x50 [ 1169.503874][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1169.509256][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.515437][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1169.520665][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1169.526831][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1169.531865][ C0] exit_to_user_mode_prepare+0x171/0x280 [ 1169.537523][ C0] syscall_exit_to_user_mode+0x19/0x60 [ 1169.542995][ C0] do_syscall_64+0x47/0xb0 [ 1169.547421][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1169.553322][ C0] RIP: 0033:0x4665f9 [ 1169.557234][ C0] Code: Unable to access opcode bytes at RIP 0x4665cf. [ 1169.564078][ C0] RSP: 002b:00007f394db06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.572528][ C0] RAX: 0000000000000006 RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1169.580515][ C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1169.588503][ C0] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1169.596506][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1169.604513][ C0] R13: 00007ffc0c57982f R14: 00007f394db06300 R15: 0000000000022000 [ 1170.700443][ C0] Shutting down cpus with NMI [ 1170.705700][ C0] Kernel Offset: disabled [ 1170.713826][ C0] Rebooting in 86400 seconds..