Warning: Permanently added '[localhost]:40385' (ECDSA) to the list of known hosts. 2021/03/14 14:26:33 fuzzer started 2021/03/14 14:26:33 dialing manager at localhost:36045 2021/03/14 14:26:34 syscalls: 3628 2021/03/14 14:26:34 code coverage: enabled 2021/03/14 14:26:34 comparison tracing: enabled 2021/03/14 14:26:34 extra coverage: enabled 2021/03/14 14:26:34 setuid sandbox: enabled 2021/03/14 14:26:34 namespace sandbox: enabled 2021/03/14 14:26:34 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/14 14:26:34 fault injection: enabled 2021/03/14 14:26:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/14 14:26:34 net packet injection: enabled 2021/03/14 14:26:34 net device setup: enabled 2021/03/14 14:26:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/14 14:26:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/14 14:26:34 USB emulation: enabled 2021/03/14 14:26:34 hci packet injection: enabled 2021/03/14 14:26:34 wifi device emulation: enabled 2021/03/14 14:26:34 802.15.4 emulation: enabled 2021/03/14 14:26:34 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/14 14:26:34 fetching corpus: 50, signal 45984/49728 (executing program) 2021/03/14 14:26:34 fetching corpus: 100, signal 58833/64319 (executing program) 2021/03/14 14:26:34 fetching corpus: 150, signal 77873/84970 (executing program) 2021/03/14 14:26:35 fetching corpus: 200, signal 86140/94891 (executing program) 2021/03/14 14:26:35 fetching corpus: 250, signal 93340/103663 (executing program) 2021/03/14 14:26:35 fetching corpus: 300, signal 101733/113602 (executing program) 2021/03/14 14:26:35 fetching corpus: 350, signal 105816/119304 (executing program) 2021/03/14 14:26:35 fetching corpus: 400, signal 111300/126316 (executing program) 2021/03/14 14:26:35 fetching corpus: 450, signal 117499/134003 (executing program) 2021/03/14 14:26:36 fetching corpus: 500, signal 123252/141177 (executing program) 2021/03/14 14:26:36 fetching corpus: 550, signal 128878/148239 (executing program) 2021/03/14 14:26:36 fetching corpus: 600, signal 134427/155251 (executing program) 2021/03/14 14:26:36 fetching corpus: 650, signal 138619/160833 (executing program) 2021/03/14 14:26:36 fetching corpus: 700, signal 142380/165993 (executing program) 2021/03/14 14:26:37 fetching corpus: 750, signal 149291/174163 (executing program) 2021/03/14 14:26:37 fetching corpus: 800, signal 160797/186632 (executing program) 2021/03/14 14:26:38 fetching corpus: 850, signal 164718/191881 (executing program) 2021/03/14 14:26:38 fetching corpus: 900, signal 174245/202347 (executing program) 2021/03/14 14:26:38 fetching corpus: 950, signal 177520/206881 (executing program) 2021/03/14 14:26:38 fetching corpus: 1000, signal 180692/211263 (executing program) 2021/03/14 14:26:38 fetching corpus: 1050, signal 184043/215862 (executing program) 2021/03/14 14:26:39 fetching corpus: 1100, signal 187264/220313 (executing program) 2021/03/14 14:26:39 fetching corpus: 1150, signal 192620/226748 (executing program) 2021/03/14 14:26:39 fetching corpus: 1200, signal 195213/230571 (executing program) 2021/03/14 14:26:39 fetching corpus: 1250, signal 198707/235237 (executing program) 2021/03/14 14:26:39 fetching corpus: 1300, signal 201165/238934 (executing program) 2021/03/14 14:26:39 fetching corpus: 1350, signal 203523/242553 (executing program) 2021/03/14 14:26:40 fetching corpus: 1400, signal 209090/248988 (executing program) 2021/03/14 14:26:40 fetching corpus: 1450, signal 211915/252946 (executing program) 2021/03/14 14:26:40 fetching corpus: 1500, signal 214010/256228 (executing program) 2021/03/14 14:26:40 fetching corpus: 1550, signal 216302/259625 (executing program) 2021/03/14 14:26:40 fetching corpus: 1600, signal 218888/263320 (executing program) 2021/03/14 14:26:40 fetching corpus: 1650, signal 223934/269211 (executing program) 2021/03/14 14:26:41 fetching corpus: 1700, signal 234224/279794 (executing program) 2021/03/14 14:26:41 fetching corpus: 1750, signal 236468/283152 (executing program) 2021/03/14 14:26:41 fetching corpus: 1800, signal 239631/287278 (executing program) 2021/03/14 14:26:41 fetching corpus: 1850, signal 241779/290434 (executing program) 2021/03/14 14:26:41 fetching corpus: 1900, signal 245554/295053 (executing program) 2021/03/14 14:26:42 fetching corpus: 1950, signal 247726/298268 (executing program) 2021/03/14 14:26:42 fetching corpus: 2000, signal 249527/301123 (executing program) 2021/03/14 14:26:42 fetching corpus: 2050, signal 253978/306256 (executing program) 2021/03/14 14:26:42 fetching corpus: 2100, signal 256330/309573 (executing program) 2021/03/14 14:26:42 fetching corpus: 2150, signal 259025/313161 (executing program) 2021/03/14 14:26:42 fetching corpus: 2200, signal 261284/316330 (executing program) 2021/03/14 14:26:43 fetching corpus: 2250, signal 262834/318874 (executing program) 2021/03/14 14:26:43 fetching corpus: 2300, signal 265071/322016 (executing program) 2021/03/14 14:26:43 fetching corpus: 2350, signal 266856/324772 (executing program) 2021/03/14 14:26:43 fetching corpus: 2400, signal 268764/327566 (executing program) 2021/03/14 14:26:43 fetching corpus: 2450, signal 270761/330506 (executing program) 2021/03/14 14:26:43 fetching corpus: 2500, signal 273834/334257 (executing program) 2021/03/14 14:26:44 fetching corpus: 2550, signal 276301/337557 (executing program) 2021/03/14 14:26:44 fetching corpus: 2600, signal 278580/340633 (executing program) 2021/03/14 14:26:45 fetching corpus: 2650, signal 280513/343442 (executing program) 2021/03/14 14:26:45 fetching corpus: 2700, signal 281970/345841 (executing program) 2021/03/14 14:26:45 fetching corpus: 2750, signal 283790/348531 (executing program) 2021/03/14 14:26:45 fetching corpus: 2800, signal 286298/351769 (executing program) 2021/03/14 14:26:45 fetching corpus: 2850, signal 287462/353916 (executing program) 2021/03/14 14:26:45 fetching corpus: 2900, signal 289036/356394 (executing program) 2021/03/14 14:26:46 fetching corpus: 2950, signal 291899/359916 (executing program) 2021/03/14 14:26:46 fetching corpus: 3000, signal 293559/362424 (executing program) 2021/03/14 14:26:46 fetching corpus: 3050, signal 294884/364639 (executing program) 2021/03/14 14:26:46 fetching corpus: 3100, signal 296292/366891 (executing program) 2021/03/14 14:26:46 fetching corpus: 3150, signal 297255/368811 (executing program) 2021/03/14 14:26:46 fetching corpus: 3200, signal 299694/371908 (executing program) 2021/03/14 14:26:47 fetching corpus: 3250, signal 304264/376712 (executing program) 2021/03/14 14:26:47 fetching corpus: 3300, signal 305528/378863 (executing program) 2021/03/14 14:26:47 fetching corpus: 3350, signal 309099/382780 (executing program) 2021/03/14 14:26:47 fetching corpus: 3400, signal 310099/384662 (executing program) 2021/03/14 14:26:47 fetching corpus: 3450, signal 312787/387764 (executing program) 2021/03/14 14:26:47 fetching corpus: 3500, signal 314183/389903 (executing program) 2021/03/14 14:26:48 fetching corpus: 3550, signal 316016/392381 (executing program) 2021/03/14 14:26:48 fetching corpus: 3600, signal 318322/395253 (executing program) 2021/03/14 14:26:48 fetching corpus: 3650, signal 319012/396856 (executing program) 2021/03/14 14:26:48 fetching corpus: 3700, signal 320244/398881 (executing program) 2021/03/14 14:26:48 fetching corpus: 3750, signal 322546/401673 (executing program) 2021/03/14 14:26:49 fetching corpus: 3800, signal 323217/403199 (executing program) 2021/03/14 14:26:49 fetching corpus: 3850, signal 324173/405012 (executing program) 2021/03/14 14:26:49 fetching corpus: 3900, signal 325726/407231 (executing program) 2021/03/14 14:26:49 fetching corpus: 3950, signal 327099/409308 (executing program) 2021/03/14 14:26:49 fetching corpus: 4000, signal 329243/412031 (executing program) syzkaller login: [ 102.909264][ T3408] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.919346][ T3408] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/14 14:26:50 fetching corpus: 4050, signal 330405/413924 (executing program) 2021/03/14 14:26:50 fetching corpus: 4100, signal 331554/415807 (executing program) 2021/03/14 14:26:50 fetching corpus: 4150, signal 333279/418117 (executing program) 2021/03/14 14:26:50 fetching corpus: 4200, signal 334532/420078 (executing program) 2021/03/14 14:26:50 fetching corpus: 4250, signal 335504/421815 (executing program) 2021/03/14 14:26:50 fetching corpus: 4300, signal 337133/424024 (executing program) 2021/03/14 14:26:51 fetching corpus: 4350, signal 338573/426058 (executing program) 2021/03/14 14:26:51 fetching corpus: 4400, signal 339679/427875 (executing program) 2021/03/14 14:26:52 fetching corpus: 4450, signal 341023/429804 (executing program) 2021/03/14 14:26:52 fetching corpus: 4500, signal 341954/431463 (executing program) 2021/03/14 14:26:52 fetching corpus: 4550, signal 343462/433537 (executing program) 2021/03/14 14:26:52 fetching corpus: 4600, signal 344178/434988 (executing program) 2021/03/14 14:26:52 fetching corpus: 4650, signal 345244/436703 (executing program) 2021/03/14 14:26:53 fetching corpus: 4700, signal 347347/439211 (executing program) 2021/03/14 14:26:53 fetching corpus: 4750, signal 348227/440824 (executing program) 2021/03/14 14:26:53 fetching corpus: 4800, signal 349557/442731 (executing program) 2021/03/14 14:26:53 fetching corpus: 4850, signal 350279/444231 (executing program) 2021/03/14 14:26:54 fetching corpus: 4900, signal 351301/445863 (executing program) 2021/03/14 14:26:54 fetching corpus: 4950, signal 352868/447925 (executing program) 2021/03/14 14:26:54 fetching corpus: 5000, signal 355252/450490 (executing program) 2021/03/14 14:26:54 fetching corpus: 5050, signal 356616/452425 (executing program) 2021/03/14 14:26:55 fetching corpus: 5100, signal 357600/454040 (executing program) 2021/03/14 14:26:55 fetching corpus: 5150, signal 358322/455411 (executing program) 2021/03/14 14:26:55 fetching corpus: 5200, signal 358860/456734 (executing program) 2021/03/14 14:26:55 fetching corpus: 5250, signal 361543/459531 (executing program) 2021/03/14 14:26:55 fetching corpus: 5300, signal 363057/461495 (executing program) 2021/03/14 14:26:56 fetching corpus: 5350, signal 363889/463018 (executing program) 2021/03/14 14:26:56 fetching corpus: 5400, signal 364931/464662 (executing program) 2021/03/14 14:26:56 fetching corpus: 5450, signal 365917/466220 (executing program) 2021/03/14 14:26:56 fetching corpus: 5500, signal 366834/467782 (executing program) 2021/03/14 14:26:56 fetching corpus: 5550, signal 367915/469426 (executing program) 2021/03/14 14:26:57 fetching corpus: 5600, signal 368738/470892 (executing program) 2021/03/14 14:26:57 fetching corpus: 5650, signal 370139/472730 (executing program) 2021/03/14 14:26:57 fetching corpus: 5700, signal 371431/474522 (executing program) 2021/03/14 14:26:57 fetching corpus: 5750, signal 372720/476299 (executing program) 2021/03/14 14:26:57 fetching corpus: 5800, signal 373765/477835 (executing program) 2021/03/14 14:26:58 fetching corpus: 5850, signal 374508/479155 (executing program) 2021/03/14 14:26:58 fetching corpus: 5900, signal 376442/481304 (executing program) 2021/03/14 14:26:58 fetching corpus: 5950, signal 377335/482781 (executing program) 2021/03/14 14:26:58 fetching corpus: 6000, signal 378174/484195 (executing program) 2021/03/14 14:26:58 fetching corpus: 6050, signal 379159/485733 (executing program) 2021/03/14 14:26:59 fetching corpus: 6100, signal 379875/487092 (executing program) 2021/03/14 14:26:59 fetching corpus: 6150, signal 381347/488958 (executing program) 2021/03/14 14:26:59 fetching corpus: 6200, signal 382363/490457 (executing program) 2021/03/14 14:26:59 fetching corpus: 6250, signal 384130/492461 (executing program) 2021/03/14 14:26:59 fetching corpus: 6300, signal 385120/493887 (executing program) 2021/03/14 14:27:00 fetching corpus: 6350, signal 386311/495509 (executing program) 2021/03/14 14:27:00 fetching corpus: 6400, signal 387284/496982 (executing program) 2021/03/14 14:27:00 fetching corpus: 6450, signal 389916/499427 (executing program) 2021/03/14 14:27:00 fetching corpus: 6500, signal 391650/501304 (executing program) 2021/03/14 14:27:01 fetching corpus: 6550, signal 393185/503040 (executing program) 2021/03/14 14:27:01 fetching corpus: 6600, signal 393718/504201 (executing program) 2021/03/14 14:27:01 fetching corpus: 6650, signal 394389/505431 (executing program) 2021/03/14 14:27:01 fetching corpus: 6700, signal 395725/507021 (executing program) 2021/03/14 14:27:01 fetching corpus: 6750, signal 396615/508414 (executing program) 2021/03/14 14:27:02 fetching corpus: 6800, signal 398403/510249 (executing program) 2021/03/14 14:27:02 fetching corpus: 6850, signal 399700/511869 (executing program) 2021/03/14 14:27:02 fetching corpus: 6900, signal 401370/513662 (executing program) 2021/03/14 14:27:02 fetching corpus: 6950, signal 401851/514788 (executing program) 2021/03/14 14:27:02 fetching corpus: 7000, signal 402540/515964 (executing program) 2021/03/14 14:27:03 fetching corpus: 7050, signal 403273/517169 (executing program) 2021/03/14 14:27:03 fetching corpus: 7100, signal 403936/518374 (executing program) 2021/03/14 14:27:03 fetching corpus: 7150, signal 404715/519607 (executing program) 2021/03/14 14:27:03 fetching corpus: 7200, signal 405318/520769 (executing program) 2021/03/14 14:27:03 fetching corpus: 7250, signal 406993/522501 (executing program) 2021/03/14 14:27:03 fetching corpus: 7300, signal 408527/524156 (executing program) 2021/03/14 14:27:04 fetching corpus: 7350, signal 411167/526400 (executing program) 2021/03/14 14:27:04 fetching corpus: 7400, signal 412014/527648 (executing program) 2021/03/14 14:27:04 fetching corpus: 7450, signal 413706/529376 (executing program) 2021/03/14 14:27:04 fetching corpus: 7500, signal 414550/530600 (executing program) 2021/03/14 14:27:05 fetching corpus: 7550, signal 415228/531759 (executing program) 2021/03/14 14:27:05 fetching corpus: 7600, signal 415873/532872 (executing program) 2021/03/14 14:27:05 fetching corpus: 7650, signal 416420/533950 (executing program) 2021/03/14 14:27:05 fetching corpus: 7700, signal 417141/535153 (executing program) 2021/03/14 14:27:05 fetching corpus: 7750, signal 417981/536393 (executing program) 2021/03/14 14:27:05 fetching corpus: 7800, signal 418512/537387 (executing program) 2021/03/14 14:27:06 fetching corpus: 7850, signal 419151/538471 (executing program) 2021/03/14 14:27:06 fetching corpus: 7900, signal 419841/539588 (executing program) 2021/03/14 14:27:06 fetching corpus: 7950, signal 421321/541161 (executing program) 2021/03/14 14:27:06 fetching corpus: 8000, signal 422027/542249 (executing program) 2021/03/14 14:27:06 fetching corpus: 8050, signal 422541/543276 (executing program) 2021/03/14 14:27:06 fetching corpus: 8100, signal 423398/544507 (executing program) 2021/03/14 14:27:07 fetching corpus: 8150, signal 424073/545632 (executing program) 2021/03/14 14:27:07 fetching corpus: 8200, signal 424663/546665 (executing program) 2021/03/14 14:27:07 fetching corpus: 8250, signal 426103/548116 (executing program) 2021/03/14 14:27:07 fetching corpus: 8300, signal 426962/549296 (executing program) 2021/03/14 14:27:07 fetching corpus: 8350, signal 427442/550252 (executing program) 2021/03/14 14:27:08 fetching corpus: 8400, signal 428211/551332 (executing program) 2021/03/14 14:27:08 fetching corpus: 8450, signal 428866/552385 (executing program) 2021/03/14 14:27:08 fetching corpus: 8500, signal 430193/553782 (executing program) 2021/03/14 14:27:08 fetching corpus: 8550, signal 430943/554869 (executing program) 2021/03/14 14:27:08 fetching corpus: 8600, signal 431879/556069 (executing program) 2021/03/14 14:27:08 fetching corpus: 8650, signal 432821/557251 (executing program) 2021/03/14 14:27:09 fetching corpus: 8700, signal 433512/558311 (executing program) 2021/03/14 14:27:09 fetching corpus: 8750, signal 434734/559661 (executing program) 2021/03/14 14:27:09 fetching corpus: 8800, signal 435697/560883 (executing program) 2021/03/14 14:27:09 fetching corpus: 8850, signal 436319/561877 (executing program) 2021/03/14 14:27:09 fetching corpus: 8900, signal 437238/562999 (executing program) 2021/03/14 14:27:10 fetching corpus: 8950, signal 439091/564547 (executing program) 2021/03/14 14:27:10 fetching corpus: 9000, signal 439674/565502 (executing program) 2021/03/14 14:27:10 fetching corpus: 9050, signal 440579/566609 (executing program) 2021/03/14 14:27:10 fetching corpus: 9100, signal 441762/567819 (executing program) 2021/03/14 14:27:10 fetching corpus: 9150, signal 444029/569567 (executing program) 2021/03/14 14:27:11 fetching corpus: 9200, signal 444697/570528 (executing program) 2021/03/14 14:27:11 fetching corpus: 9250, signal 445644/571643 (executing program) 2021/03/14 14:27:11 fetching corpus: 9300, signal 446610/572758 (executing program) 2021/03/14 14:27:11 fetching corpus: 9350, signal 447268/573749 (executing program) 2021/03/14 14:27:12 fetching corpus: 9400, signal 447900/574677 (executing program) 2021/03/14 14:27:12 fetching corpus: 9450, signal 448568/575638 (executing program) 2021/03/14 14:27:12 fetching corpus: 9500, signal 449417/576676 (executing program) 2021/03/14 14:27:13 fetching corpus: 9550, signal 449976/577621 (executing program) 2021/03/14 14:27:13 fetching corpus: 9600, signal 450607/578557 (executing program) 2021/03/14 14:27:13 fetching corpus: 9650, signal 451338/579578 (executing program) 2021/03/14 14:27:14 fetching corpus: 9700, signal 452011/580485 (executing program) 2021/03/14 14:27:14 fetching corpus: 9750, signal 453127/581601 (executing program) 2021/03/14 14:27:14 fetching corpus: 9800, signal 453599/582470 (executing program) 2021/03/14 14:27:14 fetching corpus: 9850, signal 454576/583516 (executing program) 2021/03/14 14:27:15 fetching corpus: 9900, signal 455341/584486 (executing program) 2021/03/14 14:27:15 fetching corpus: 9950, signal 456018/585405 (executing program) 2021/03/14 14:27:15 fetching corpus: 10000, signal 456600/586262 (executing program) 2021/03/14 14:27:15 fetching corpus: 10050, signal 457180/587151 (executing program) 2021/03/14 14:27:16 fetching corpus: 10100, signal 457772/588010 (executing program) 2021/03/14 14:27:16 fetching corpus: 10150, signal 458230/588868 (executing program) 2021/03/14 14:27:16 fetching corpus: 10200, signal 458911/589786 (executing program) 2021/03/14 14:27:16 fetching corpus: 10250, signal 459713/590751 (executing program) 2021/03/14 14:27:17 fetching corpus: 10300, signal 460122/591593 (executing program) 2021/03/14 14:27:17 fetching corpus: 10350, signal 460559/592395 (executing program) 2021/03/14 14:27:17 fetching corpus: 10400, signal 461156/593243 (executing program) 2021/03/14 14:27:17 fetching corpus: 10450, signal 461693/594070 (executing program) 2021/03/14 14:27:17 fetching corpus: 10500, signal 462364/594986 (executing program) 2021/03/14 14:27:18 fetching corpus: 10550, signal 462820/595776 (executing program) 2021/03/14 14:27:18 fetching corpus: 10600, signal 464233/596888 (executing program) 2021/03/14 14:27:18 fetching corpus: 10650, signal 464770/597723 (executing program) 2021/03/14 14:27:18 fetching corpus: 10700, signal 465664/598629 (executing program) 2021/03/14 14:27:19 fetching corpus: 10750, signal 466173/599434 (executing program) 2021/03/14 14:27:19 fetching corpus: 10800, signal 466775/600237 (executing program) 2021/03/14 14:27:19 fetching corpus: 10850, signal 467504/601075 (executing program) 2021/03/14 14:27:19 fetching corpus: 10900, signal 469130/602213 (executing program) 2021/03/14 14:27:19 fetching corpus: 10950, signal 469676/603003 (executing program) 2021/03/14 14:27:20 fetching corpus: 11000, signal 470187/603783 (executing program) 2021/03/14 14:27:20 fetching corpus: 11050, signal 471134/604715 (executing program) 2021/03/14 14:27:21 fetching corpus: 11100, signal 471779/605543 (executing program) 2021/03/14 14:27:21 fetching corpus: 11150, signal 472649/606482 (executing program) 2021/03/14 14:27:21 fetching corpus: 11200, signal 473322/607283 (executing program) 2021/03/14 14:27:21 fetching corpus: 11250, signal 473910/608058 (executing program) 2021/03/14 14:27:21 fetching corpus: 11300, signal 474503/608864 (executing program) 2021/03/14 14:27:22 fetching corpus: 11350, signal 476011/609957 (executing program) 2021/03/14 14:27:22 fetching corpus: 11400, signal 476677/610734 (executing program) 2021/03/14 14:27:22 fetching corpus: 11450, signal 477444/611547 (executing program) 2021/03/14 14:27:22 fetching corpus: 11500, signal 478102/612336 (executing program) 2021/03/14 14:27:22 fetching corpus: 11550, signal 482998/614434 (executing program) 2021/03/14 14:27:22 fetching corpus: 11600, signal 483694/615200 (executing program) 2021/03/14 14:27:23 fetching corpus: 11650, signal 484226/615932 (executing program) 2021/03/14 14:27:23 fetching corpus: 11700, signal 484861/616664 (executing program) 2021/03/14 14:27:23 fetching corpus: 11750, signal 485253/617321 (executing program) 2021/03/14 14:27:23 fetching corpus: 11800, signal 485949/618089 (executing program) 2021/03/14 14:27:23 fetching corpus: 11850, signal 486275/618740 (executing program) 2021/03/14 14:27:24 fetching corpus: 11900, signal 486873/619479 (executing program) 2021/03/14 14:27:24 fetching corpus: 11950, signal 487483/620220 (executing program) 2021/03/14 14:27:24 fetching corpus: 12000, signal 488004/620928 (executing program) 2021/03/14 14:27:24 fetching corpus: 12050, signal 489476/621896 (executing program) 2021/03/14 14:27:24 fetching corpus: 12100, signal 490020/622577 (executing program) 2021/03/14 14:27:24 fetching corpus: 12150, signal 490444/623215 (executing program) 2021/03/14 14:27:25 fetching corpus: 12200, signal 490958/623876 (executing program) 2021/03/14 14:27:25 fetching corpus: 12250, signal 492217/624771 (executing program) 2021/03/14 14:27:25 fetching corpus: 12300, signal 492628/625375 (executing program) 2021/03/14 14:27:25 fetching corpus: 12350, signal 493139/626053 (executing program) 2021/03/14 14:27:25 fetching corpus: 12400, signal 493804/626759 (executing program) 2021/03/14 14:27:26 fetching corpus: 12450, signal 494281/627410 (executing program) 2021/03/14 14:27:26 fetching corpus: 12500, signal 494640/628011 (executing program) 2021/03/14 14:27:26 fetching corpus: 12550, signal 495039/628615 (executing program) 2021/03/14 14:27:26 fetching corpus: 12600, signal 495321/629234 (executing program) 2021/03/14 14:27:26 fetching corpus: 12650, signal 495927/629964 (executing program) 2021/03/14 14:27:27 fetching corpus: 12700, signal 496334/630608 (executing program) 2021/03/14 14:27:27 fetching corpus: 12750, signal 496923/631288 (executing program) 2021/03/14 14:27:27 fetching corpus: 12800, signal 497676/631975 (executing program) 2021/03/14 14:27:27 fetching corpus: 12850, signal 498129/632608 (executing program) 2021/03/14 14:27:27 fetching corpus: 12900, signal 498712/633258 (executing program) 2021/03/14 14:27:28 fetching corpus: 12950, signal 499839/634063 (executing program) 2021/03/14 14:27:28 fetching corpus: 13000, signal 500485/634731 (executing program) 2021/03/14 14:27:28 fetching corpus: 13050, signal 501081/635389 (executing program) 2021/03/14 14:27:28 fetching corpus: 13100, signal 501886/636100 (executing program) 2021/03/14 14:27:28 fetching corpus: 13150, signal 502188/636655 (executing program) 2021/03/14 14:27:28 fetching corpus: 13200, signal 502830/637309 (executing program) 2021/03/14 14:27:28 fetching corpus: 13250, signal 503340/637913 (executing program) 2021/03/14 14:27:28 fetching corpus: 13300, signal 503714/638525 (executing program) 2021/03/14 14:27:29 fetching corpus: 13350, signal 504113/639086 (executing program) 2021/03/14 14:27:29 fetching corpus: 13400, signal 504492/639685 (executing program) 2021/03/14 14:27:29 fetching corpus: 13450, signal 504948/640275 (executing program) 2021/03/14 14:27:29 fetching corpus: 13500, signal 505600/640896 (executing program) 2021/03/14 14:27:30 fetching corpus: 13550, signal 506094/641501 (executing program) 2021/03/14 14:27:30 fetching corpus: 13600, signal 506529/642073 (executing program) 2021/03/14 14:27:30 fetching corpus: 13650, signal 507387/642701 (executing program) 2021/03/14 14:27:31 fetching corpus: 13700, signal 507672/643222 (executing program) 2021/03/14 14:27:31 fetching corpus: 13750, signal 508067/643778 (executing program) 2021/03/14 14:27:31 fetching corpus: 13800, signal 508786/644376 (executing program) 2021/03/14 14:27:31 fetching corpus: 13850, signal 509622/645028 (executing program) 2021/03/14 14:27:31 fetching corpus: 13900, signal 509973/645601 (executing program) 2021/03/14 14:27:32 fetching corpus: 13950, signal 510300/646148 (executing program) 2021/03/14 14:27:32 fetching corpus: 14000, signal 511076/646764 (executing program) 2021/03/14 14:27:32 fetching corpus: 14050, signal 511451/647300 (executing program) 2021/03/14 14:27:32 fetching corpus: 14100, signal 512072/647849 (executing program) 2021/03/14 14:27:33 fetching corpus: 14150, signal 512456/648384 (executing program) 2021/03/14 14:27:33 fetching corpus: 14200, signal 512962/648944 (executing program) 2021/03/14 14:27:33 fetching corpus: 14250, signal 513676/649520 (executing program) 2021/03/14 14:27:33 fetching corpus: 14300, signal 514026/650072 (executing program) 2021/03/14 14:27:33 fetching corpus: 14350, signal 514537/650647 (executing program) 2021/03/14 14:27:34 fetching corpus: 14400, signal 515523/651253 (executing program) 2021/03/14 14:27:34 fetching corpus: 14450, signal 515926/651757 (executing program) 2021/03/14 14:27:34 fetching corpus: 14500, signal 516394/652245 (executing program) 2021/03/14 14:27:34 fetching corpus: 14550, signal 516833/652767 (executing program) 2021/03/14 14:27:35 fetching corpus: 14600, signal 517147/653281 (executing program) 2021/03/14 14:27:35 fetching corpus: 14650, signal 517785/653827 (executing program) 2021/03/14 14:27:36 fetching corpus: 14700, signal 518211/654343 (executing program) 2021/03/14 14:27:40 fetching corpus: 14750, signal 518860/654883 (executing program) 2021/03/14 14:27:40 fetching corpus: 14800, signal 519212/655401 (executing program) 2021/03/14 14:27:40 fetching corpus: 14850, signal 519675/655913 (executing program) 2021/03/14 14:27:41 fetching corpus: 14900, signal 520231/656419 (executing program) 2021/03/14 14:27:41 fetching corpus: 14950, signal 520672/656984 (executing program) 2021/03/14 14:27:41 fetching corpus: 15000, signal 521228/657487 (executing program) 2021/03/14 14:27:42 fetching corpus: 15050, signal 521585/658001 (executing program) 2021/03/14 14:27:42 fetching corpus: 15100, signal 521886/658495 (executing program) 2021/03/14 14:27:42 fetching corpus: 15150, signal 522327/658972 (executing program) 2021/03/14 14:27:42 fetching corpus: 15200, signal 522679/659442 (executing program) 2021/03/14 14:27:42 fetching corpus: 15250, signal 523294/659936 (executing program) 2021/03/14 14:27:43 fetching corpus: 15300, signal 523718/660391 (executing program) 2021/03/14 14:27:43 fetching corpus: 15350, signal 524080/660854 (executing program) 2021/03/14 14:27:43 fetching corpus: 15400, signal 524515/661346 (executing program) 2021/03/14 14:27:43 fetching corpus: 15450, signal 525049/661846 (executing program) 2021/03/14 14:27:43 fetching corpus: 15500, signal 525922/662321 (executing program) 2021/03/14 14:27:44 fetching corpus: 15550, signal 526220/662770 (executing program) 2021/03/14 14:27:44 fetching corpus: 15600, signal 526741/663248 (executing program) 2021/03/14 14:27:44 fetching corpus: 15650, signal 527672/663768 (executing program) 2021/03/14 14:27:44 fetching corpus: 15700, signal 528352/664242 (executing program) 2021/03/14 14:27:44 fetching corpus: 15750, signal 528661/664693 (executing program) 2021/03/14 14:27:45 fetching corpus: 15800, signal 529257/665135 (executing program) 2021/03/14 14:27:45 fetching corpus: 15850, signal 529707/665591 (executing program) 2021/03/14 14:27:45 fetching corpus: 15900, signal 530295/666076 (executing program) 2021/03/14 14:27:45 fetching corpus: 15950, signal 530597/666510 (executing program) 2021/03/14 14:27:45 fetching corpus: 16000, signal 530961/666974 (executing program) 2021/03/14 14:27:46 fetching corpus: 16050, signal 531570/667427 (executing program) 2021/03/14 14:27:46 fetching corpus: 16100, signal 531963/667815 (executing program) 2021/03/14 14:27:46 fetching corpus: 16150, signal 532424/668266 (executing program) 2021/03/14 14:27:46 fetching corpus: 16200, signal 532811/668682 (executing program) 2021/03/14 14:27:46 fetching corpus: 16250, signal 533254/669120 (executing program) 2021/03/14 14:27:47 fetching corpus: 16300, signal 533632/669518 (executing program) 2021/03/14 14:27:47 fetching corpus: 16350, signal 535110/669939 (executing program) 2021/03/14 14:27:47 fetching corpus: 16400, signal 535488/670371 (executing program) 2021/03/14 14:27:48 fetching corpus: 16450, signal 535941/670759 (executing program) 2021/03/14 14:27:48 fetching corpus: 16500, signal 536302/671148 (executing program) 2021/03/14 14:27:48 fetching corpus: 16550, signal 536820/671558 (executing program) 2021/03/14 14:27:48 fetching corpus: 16600, signal 537027/671962 (executing program) 2021/03/14 14:27:48 fetching corpus: 16650, signal 537473/672365 (executing program) 2021/03/14 14:27:49 fetching corpus: 16700, signal 537977/672791 (executing program) 2021/03/14 14:27:49 fetching corpus: 16750, signal 538655/673206 (executing program) 2021/03/14 14:27:49 fetching corpus: 16800, signal 539095/673463 (executing program) 2021/03/14 14:27:49 fetching corpus: 16850, signal 539637/673463 (executing program) 2021/03/14 14:27:50 fetching corpus: 16900, signal 540128/673463 (executing program) 2021/03/14 14:27:50 fetching corpus: 16950, signal 540635/673463 (executing program) 2021/03/14 14:27:50 fetching corpus: 17000, signal 541487/673463 (executing program) 2021/03/14 14:27:50 fetching corpus: 17050, signal 542250/673463 (executing program) 2021/03/14 14:27:50 fetching corpus: 17100, signal 542604/673463 (executing program) 2021/03/14 14:27:51 fetching corpus: 17150, signal 542932/673463 (executing program) [ 164.347200][ T3408] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.358473][ T3408] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/14 14:27:51 fetching corpus: 17200, signal 543267/673463 (executing program) 2021/03/14 14:27:51 fetching corpus: 17250, signal 544423/673463 (executing program) 2021/03/14 14:27:52 fetching corpus: 17300, signal 545150/673463 (executing program) 2021/03/14 14:27:52 fetching corpus: 17350, signal 545750/673463 (executing program) 2021/03/14 14:27:52 fetching corpus: 17400, signal 546099/673463 (executing program) 2021/03/14 14:27:52 fetching corpus: 17450, signal 546430/673463 (executing program) 2021/03/14 14:27:52 fetching corpus: 17500, signal 546926/673476 (executing program) 2021/03/14 14:27:52 fetching corpus: 17550, signal 547225/673476 (executing program) 2021/03/14 14:27:53 fetching corpus: 17600, signal 547754/673476 (executing program) 2021/03/14 14:27:53 fetching corpus: 17650, signal 548059/673476 (executing program) 2021/03/14 14:27:53 fetching corpus: 17700, signal 548332/673476 (executing program) 2021/03/14 14:27:53 fetching corpus: 17750, signal 548979/673476 (executing program) 2021/03/14 14:27:53 fetching corpus: 17800, signal 549251/673476 (executing program) 2021/03/14 14:27:53 fetching corpus: 17850, signal 549642/673476 (executing program) 2021/03/14 14:27:54 fetching corpus: 17900, signal 549903/673476 (executing program) 2021/03/14 14:27:54 fetching corpus: 17950, signal 550176/673476 (executing program) 2021/03/14 14:27:54 fetching corpus: 18000, signal 550667/673476 (executing program) 2021/03/14 14:27:54 fetching corpus: 18050, signal 551432/673476 (executing program) 2021/03/14 14:27:54 fetching corpus: 18100, signal 552057/673482 (executing program) 2021/03/14 14:27:54 fetching corpus: 18150, signal 552413/673483 (executing program) 2021/03/14 14:27:55 fetching corpus: 18200, signal 552769/673483 (executing program) 2021/03/14 14:27:55 fetching corpus: 18250, signal 553488/673486 (executing program) 2021/03/14 14:27:55 fetching corpus: 18300, signal 554510/673486 (executing program) 2021/03/14 14:27:55 fetching corpus: 18350, signal 554961/673486 (executing program) 2021/03/14 14:27:55 fetching corpus: 18400, signal 555418/673490 (executing program) 2021/03/14 14:27:56 fetching corpus: 18450, signal 555738/673490 (executing program) 2021/03/14 14:27:56 fetching corpus: 18500, signal 556253/673490 (executing program) 2021/03/14 14:27:56 fetching corpus: 18550, signal 556618/673490 (executing program) 2021/03/14 14:27:56 fetching corpus: 18600, signal 556919/673490 (executing program) 2021/03/14 14:27:56 fetching corpus: 18650, signal 557198/673490 (executing program) 2021/03/14 14:27:56 fetching corpus: 18700, signal 557464/673490 (executing program) 2021/03/14 14:27:57 fetching corpus: 18750, signal 557647/673490 (executing program) 2021/03/14 14:27:57 fetching corpus: 18800, signal 557991/673490 (executing program) 2021/03/14 14:27:57 fetching corpus: 18850, signal 558249/673490 (executing program) 2021/03/14 14:27:57 fetching corpus: 18900, signal 558862/673490 (executing program) 2021/03/14 14:27:57 fetching corpus: 18950, signal 559421/673490 (executing program) 2021/03/14 14:27:58 fetching corpus: 19000, signal 559832/673490 (executing program) 2021/03/14 14:27:58 fetching corpus: 19050, signal 560154/673490 (executing program) 2021/03/14 14:27:58 fetching corpus: 19100, signal 560445/673490 (executing program) 2021/03/14 14:27:58 fetching corpus: 19150, signal 560760/673490 (executing program) 2021/03/14 14:27:58 fetching corpus: 19200, signal 561309/673490 (executing program) 2021/03/14 14:27:59 fetching corpus: 19250, signal 561761/673492 (executing program) 2021/03/14 14:27:59 fetching corpus: 19300, signal 562555/673492 (executing program) 2021/03/14 14:27:59 fetching corpus: 19350, signal 562856/673496 (executing program) 2021/03/14 14:27:59 fetching corpus: 19400, signal 563264/673496 (executing program) 2021/03/14 14:27:59 fetching corpus: 19450, signal 563546/673496 (executing program) 2021/03/14 14:28:00 fetching corpus: 19500, signal 563842/673497 (executing program) 2021/03/14 14:28:00 fetching corpus: 19550, signal 564471/673497 (executing program) 2021/03/14 14:28:00 fetching corpus: 19600, signal 564779/673497 (executing program) 2021/03/14 14:28:00 fetching corpus: 19650, signal 566840/673497 (executing program) 2021/03/14 14:28:00 fetching corpus: 19700, signal 567202/673497 (executing program) 2021/03/14 14:28:01 fetching corpus: 19750, signal 567507/673497 (executing program) 2021/03/14 14:28:01 fetching corpus: 19800, signal 567789/673497 (executing program) 2021/03/14 14:28:02 fetching corpus: 19850, signal 568096/673497 (executing program) 2021/03/14 14:28:02 fetching corpus: 19900, signal 568520/673497 (executing program) 2021/03/14 14:28:02 fetching corpus: 19950, signal 568997/673497 (executing program) 2021/03/14 14:28:02 fetching corpus: 20000, signal 569255/673497 (executing program) 2021/03/14 14:28:02 fetching corpus: 20050, signal 569674/673497 (executing program) 2021/03/14 14:28:02 fetching corpus: 20100, signal 570002/673497 (executing program) 2021/03/14 14:28:03 fetching corpus: 20150, signal 570252/673497 (executing program) 2021/03/14 14:28:03 fetching corpus: 20200, signal 570615/673497 (executing program) 2021/03/14 14:28:03 fetching corpus: 20250, signal 570993/673497 (executing program) 2021/03/14 14:28:04 fetching corpus: 20300, signal 571310/673497 (executing program) 2021/03/14 14:28:04 fetching corpus: 20350, signal 572481/673498 (executing program) 2021/03/14 14:28:04 fetching corpus: 20400, signal 573254/673498 (executing program) 2021/03/14 14:28:05 fetching corpus: 20450, signal 574138/673498 (executing program) 2021/03/14 14:28:05 fetching corpus: 20500, signal 574533/673498 (executing program) 2021/03/14 14:28:05 fetching corpus: 20550, signal 574912/673498 (executing program) 2021/03/14 14:28:05 fetching corpus: 20600, signal 575263/673498 (executing program) 2021/03/14 14:28:06 fetching corpus: 20650, signal 576473/673498 (executing program) 2021/03/14 14:28:06 fetching corpus: 20700, signal 576996/673498 (executing program) 2021/03/14 14:28:06 fetching corpus: 20750, signal 577354/673498 (executing program) 2021/03/14 14:28:06 fetching corpus: 20800, signal 577627/673499 (executing program) 2021/03/14 14:28:06 fetching corpus: 20850, signal 577889/673504 (executing program) 2021/03/14 14:28:07 fetching corpus: 20900, signal 578199/673504 (executing program) 2021/03/14 14:28:07 fetching corpus: 20950, signal 578445/673504 (executing program) 2021/03/14 14:28:07 fetching corpus: 21000, signal 579150/673504 (executing program) 2021/03/14 14:28:07 fetching corpus: 21050, signal 579570/673510 (executing program) 2021/03/14 14:28:07 fetching corpus: 21100, signal 579959/673510 (executing program) 2021/03/14 14:28:07 fetching corpus: 21150, signal 580283/673510 (executing program) 2021/03/14 14:28:07 fetching corpus: 21200, signal 580586/673510 (executing program) 2021/03/14 14:28:08 fetching corpus: 21250, signal 581200/673510 (executing program) 2021/03/14 14:28:08 fetching corpus: 21300, signal 581579/673510 (executing program) 2021/03/14 14:28:08 fetching corpus: 21350, signal 582055/673510 (executing program) 2021/03/14 14:28:08 fetching corpus: 21400, signal 582355/673510 (executing program) 2021/03/14 14:28:08 fetching corpus: 21450, signal 582614/673510 (executing program) 2021/03/14 14:28:09 fetching corpus: 21500, signal 582890/673512 (executing program) 2021/03/14 14:28:09 fetching corpus: 21550, signal 583227/673512 (executing program) 2021/03/14 14:28:09 fetching corpus: 21600, signal 583524/673512 (executing program) 2021/03/14 14:28:09 fetching corpus: 21650, signal 583792/673512 (executing program) 2021/03/14 14:28:10 fetching corpus: 21700, signal 584049/673512 (executing program) 2021/03/14 14:28:10 fetching corpus: 21750, signal 584354/673512 (executing program) 2021/03/14 14:28:10 fetching corpus: 21800, signal 584645/673512 (executing program) 2021/03/14 14:28:10 fetching corpus: 21850, signal 584877/673512 (executing program) 2021/03/14 14:28:10 fetching corpus: 21900, signal 585247/673512 (executing program) 2021/03/14 14:28:11 fetching corpus: 21950, signal 586033/673512 (executing program) 2021/03/14 14:28:11 fetching corpus: 22000, signal 586475/673512 (executing program) 2021/03/14 14:28:11 fetching corpus: 22050, signal 586792/673512 (executing program) 2021/03/14 14:28:11 fetching corpus: 22100, signal 587253/673513 (executing program) 2021/03/14 14:28:11 fetching corpus: 22150, signal 587456/673513 (executing program) 2021/03/14 14:28:11 fetching corpus: 22200, signal 587722/673513 (executing program) 2021/03/14 14:28:12 fetching corpus: 22250, signal 587970/673513 (executing program) 2021/03/14 14:28:12 fetching corpus: 22300, signal 588155/673513 (executing program) 2021/03/14 14:28:12 fetching corpus: 22350, signal 588543/673513 (executing program) 2021/03/14 14:28:12 fetching corpus: 22400, signal 588772/673513 (executing program) 2021/03/14 14:28:13 fetching corpus: 22450, signal 589343/673513 (executing program) 2021/03/14 14:28:13 fetching corpus: 22500, signal 589551/673513 (executing program) 2021/03/14 14:28:13 fetching corpus: 22550, signal 589811/673513 (executing program) 2021/03/14 14:28:13 fetching corpus: 22600, signal 590082/673513 (executing program) 2021/03/14 14:28:14 fetching corpus: 22650, signal 590410/673513 (executing program) 2021/03/14 14:28:14 fetching corpus: 22700, signal 590793/673513 (executing program) 2021/03/14 14:28:14 fetching corpus: 22750, signal 591071/673513 (executing program) 2021/03/14 14:28:15 fetching corpus: 22800, signal 591414/673513 (executing program) 2021/03/14 14:28:15 fetching corpus: 22850, signal 591771/673513 (executing program) 2021/03/14 14:28:16 fetching corpus: 22900, signal 592032/673513 (executing program) 2021/03/14 14:28:16 fetching corpus: 22950, signal 592441/673513 (executing program) 2021/03/14 14:28:16 fetching corpus: 23000, signal 592619/673513 (executing program) 2021/03/14 14:28:16 fetching corpus: 23050, signal 592970/673513 (executing program) 2021/03/14 14:28:17 fetching corpus: 23100, signal 593261/673513 (executing program) 2021/03/14 14:28:17 fetching corpus: 23150, signal 593662/673513 (executing program) 2021/03/14 14:28:17 fetching corpus: 23200, signal 593987/673513 (executing program) 2021/03/14 14:28:17 fetching corpus: 23250, signal 594240/673513 (executing program) 2021/03/14 14:28:17 fetching corpus: 23300, signal 594497/673516 (executing program) 2021/03/14 14:28:18 fetching corpus: 23350, signal 594794/673518 (executing program) 2021/03/14 14:28:18 fetching corpus: 23400, signal 595304/673518 (executing program) 2021/03/14 14:28:18 fetching corpus: 23450, signal 595669/673518 (executing program) 2021/03/14 14:28:18 fetching corpus: 23500, signal 596210/673518 (executing program) 2021/03/14 14:28:18 fetching corpus: 23550, signal 596575/673518 (executing program) 2021/03/14 14:28:19 fetching corpus: 23600, signal 596850/673518 (executing program) 2021/03/14 14:28:19 fetching corpus: 23650, signal 597086/673518 (executing program) 2021/03/14 14:28:19 fetching corpus: 23700, signal 597462/673518 (executing program) 2021/03/14 14:28:19 fetching corpus: 23750, signal 597656/673518 (executing program) 2021/03/14 14:28:20 fetching corpus: 23800, signal 597881/673518 (executing program) 2021/03/14 14:28:20 fetching corpus: 23850, signal 598155/673518 (executing program) 2021/03/14 14:28:20 fetching corpus: 23900, signal 598532/673518 (executing program) 2021/03/14 14:28:20 fetching corpus: 23950, signal 598889/673518 (executing program) 2021/03/14 14:28:21 fetching corpus: 24000, signal 599138/673518 (executing program) 2021/03/14 14:28:21 fetching corpus: 24050, signal 599411/673519 (executing program) 2021/03/14 14:28:21 fetching corpus: 24100, signal 599926/673519 (executing program) 2021/03/14 14:28:21 fetching corpus: 24150, signal 600149/673519 (executing program) 2021/03/14 14:28:21 fetching corpus: 24200, signal 600411/673519 (executing program) 2021/03/14 14:28:22 fetching corpus: 24250, signal 600654/673519 (executing program) 2021/03/14 14:28:22 fetching corpus: 24300, signal 600908/673519 (executing program) 2021/03/14 14:28:22 fetching corpus: 24350, signal 601180/673519 (executing program) 2021/03/14 14:28:22 fetching corpus: 24400, signal 601496/673519 (executing program) 2021/03/14 14:28:22 fetching corpus: 24450, signal 602018/673519 (executing program) 2021/03/14 14:28:22 fetching corpus: 24500, signal 602346/673519 (executing program) 2021/03/14 14:28:23 fetching corpus: 24550, signal 602552/673519 (executing program) 2021/03/14 14:28:23 fetching corpus: 24600, signal 602851/673519 (executing program) 2021/03/14 14:28:23 fetching corpus: 24650, signal 603093/673519 (executing program) 2021/03/14 14:28:23 fetching corpus: 24700, signal 606528/673519 (executing program) 2021/03/14 14:28:23 fetching corpus: 24750, signal 606733/673519 (executing program) 2021/03/14 14:28:23 fetching corpus: 24800, signal 607075/673519 (executing program) 2021/03/14 14:28:24 fetching corpus: 24850, signal 607323/673519 (executing program) 2021/03/14 14:28:24 fetching corpus: 24900, signal 607610/673519 (executing program) 2021/03/14 14:28:24 fetching corpus: 24950, signal 607955/673519 (executing program) 2021/03/14 14:28:24 fetching corpus: 25000, signal 608209/673519 (executing program) 2021/03/14 14:28:25 fetching corpus: 25050, signal 608661/673519 (executing program) 2021/03/14 14:28:25 fetching corpus: 25100, signal 608932/673519 (executing program) 2021/03/14 14:28:25 fetching corpus: 25150, signal 609409/673519 (executing program) 2021/03/14 14:28:25 fetching corpus: 25200, signal 610079/673519 (executing program) 2021/03/14 14:28:25 fetching corpus: 25250, signal 610359/673519 (executing program) 2021/03/14 14:28:26 fetching corpus: 25300, signal 610687/673519 (executing program) 2021/03/14 14:28:26 fetching corpus: 25350, signal 611003/673519 (executing program) 2021/03/14 14:28:26 fetching corpus: 25400, signal 611234/673520 (executing program) 2021/03/14 14:28:26 fetching corpus: 25450, signal 611456/673520 (executing program) 2021/03/14 14:28:26 fetching corpus: 25500, signal 611732/673520 (executing program) 2021/03/14 14:28:27 fetching corpus: 25550, signal 611988/673520 (executing program) 2021/03/14 14:28:27 fetching corpus: 25600, signal 612331/673520 (executing program) 2021/03/14 14:28:27 fetching corpus: 25650, signal 612535/673520 (executing program) 2021/03/14 14:28:27 fetching corpus: 25700, signal 612909/673520 (executing program) 2021/03/14 14:28:27 fetching corpus: 25750, signal 613289/673520 (executing program) 2021/03/14 14:28:28 fetching corpus: 25800, signal 613527/673520 (executing program) 2021/03/14 14:28:28 fetching corpus: 25850, signal 613999/673520 (executing program) 2021/03/14 14:28:28 fetching corpus: 25900, signal 614365/673520 (executing program) 2021/03/14 14:28:28 fetching corpus: 25950, signal 614653/673520 (executing program) 2021/03/14 14:28:28 fetching corpus: 26000, signal 614863/673520 (executing program) 2021/03/14 14:28:28 fetching corpus: 26050, signal 615457/673520 (executing program) 2021/03/14 14:28:29 fetching corpus: 26100, signal 615772/673520 (executing program) 2021/03/14 14:28:29 fetching corpus: 26150, signal 615983/673520 (executing program) 2021/03/14 14:28:29 fetching corpus: 26200, signal 616346/673520 (executing program) 2021/03/14 14:28:29 fetching corpus: 26250, signal 616610/673520 (executing program) 2021/03/14 14:28:30 fetching corpus: 26300, signal 616851/673520 (executing program) 2021/03/14 14:28:30 fetching corpus: 26350, signal 617085/673520 (executing program) 2021/03/14 14:28:30 fetching corpus: 26400, signal 617324/673520 (executing program) 2021/03/14 14:28:30 fetching corpus: 26450, signal 617592/673520 (executing program) 2021/03/14 14:28:30 fetching corpus: 26500, signal 617813/673520 (executing program) 2021/03/14 14:28:31 fetching corpus: 26550, signal 618096/673521 (executing program) 2021/03/14 14:28:31 fetching corpus: 26600, signal 618452/673521 (executing program) 2021/03/14 14:28:31 fetching corpus: 26650, signal 618687/673521 (executing program) 2021/03/14 14:28:31 fetching corpus: 26700, signal 618996/673521 (executing program) 2021/03/14 14:28:31 fetching corpus: 26750, signal 619326/673521 (executing program) 2021/03/14 14:28:31 fetching corpus: 26800, signal 619617/673521 (executing program) 2021/03/14 14:28:32 fetching corpus: 26850, signal 619878/673521 (executing program) 2021/03/14 14:28:32 fetching corpus: 26900, signal 620184/673521 (executing program) 2021/03/14 14:28:32 fetching corpus: 26950, signal 620456/673521 (executing program) 2021/03/14 14:28:32 fetching corpus: 27000, signal 620733/673521 (executing program) 2021/03/14 14:28:32 fetching corpus: 27050, signal 621422/673521 (executing program) 2021/03/14 14:28:33 fetching corpus: 27100, signal 621712/673521 (executing program) 2021/03/14 14:28:33 fetching corpus: 27150, signal 622010/673522 (executing program) 2021/03/14 14:28:33 fetching corpus: 27200, signal 622699/673523 (executing program) 2021/03/14 14:28:33 fetching corpus: 27250, signal 622894/673523 (executing program) 2021/03/14 14:28:33 fetching corpus: 27300, signal 623125/673525 (executing program) 2021/03/14 14:28:33 fetching corpus: 27350, signal 623378/673525 (executing program) 2021/03/14 14:28:34 fetching corpus: 27400, signal 623597/673525 (executing program) 2021/03/14 14:28:34 fetching corpus: 27450, signal 623815/673525 (executing program) 2021/03/14 14:28:34 fetching corpus: 27500, signal 624006/673525 (executing program) 2021/03/14 14:28:34 fetching corpus: 27550, signal 624436/673525 (executing program) 2021/03/14 14:28:35 fetching corpus: 27600, signal 624666/673525 (executing program) 2021/03/14 14:28:35 fetching corpus: 27650, signal 624924/673525 (executing program) 2021/03/14 14:28:35 fetching corpus: 27700, signal 625262/673525 (executing program) 2021/03/14 14:28:36 fetching corpus: 27750, signal 625568/673525 (executing program) 2021/03/14 14:28:36 fetching corpus: 27800, signal 625949/673525 (executing program) 2021/03/14 14:28:36 fetching corpus: 27850, signal 626138/673525 (executing program) 2021/03/14 14:28:36 fetching corpus: 27900, signal 626560/673525 (executing program) 2021/03/14 14:28:36 fetching corpus: 27950, signal 626868/673525 (executing program) 2021/03/14 14:28:37 fetching corpus: 28000, signal 627175/673525 (executing program) 2021/03/14 14:28:37 fetching corpus: 28050, signal 627459/673525 (executing program) 2021/03/14 14:28:37 fetching corpus: 28100, signal 627650/673525 (executing program) 2021/03/14 14:28:37 fetching corpus: 28150, signal 627861/673525 (executing program) 2021/03/14 14:28:37 fetching corpus: 28200, signal 628246/673525 (executing program) 2021/03/14 14:28:38 fetching corpus: 28250, signal 628475/673525 (executing program) 2021/03/14 14:28:38 fetching corpus: 28300, signal 628721/673525 (executing program) 2021/03/14 14:28:38 fetching corpus: 28350, signal 629073/673525 (executing program) 2021/03/14 14:28:38 fetching corpus: 28400, signal 629378/673525 (executing program) 2021/03/14 14:28:39 fetching corpus: 28450, signal 630423/673525 (executing program) 2021/03/14 14:28:39 fetching corpus: 28500, signal 630692/673525 (executing program) 2021/03/14 14:28:39 fetching corpus: 28550, signal 630880/673525 (executing program) 2021/03/14 14:28:39 fetching corpus: 28600, signal 631168/673525 (executing program) 2021/03/14 14:28:39 fetching corpus: 28650, signal 631358/673525 (executing program) 2021/03/14 14:28:39 fetching corpus: 28700, signal 631622/673525 (executing program) 2021/03/14 14:28:40 fetching corpus: 28750, signal 631827/673525 (executing program) 2021/03/14 14:28:40 fetching corpus: 28800, signal 632273/673525 (executing program) 2021/03/14 14:28:40 fetching corpus: 28850, signal 632623/673525 (executing program) 2021/03/14 14:28:40 fetching corpus: 28900, signal 632945/673525 (executing program) 2021/03/14 14:28:40 fetching corpus: 28950, signal 633259/673527 (executing program) 2021/03/14 14:28:40 fetching corpus: 29000, signal 633385/673529 (executing program) 2021/03/14 14:28:41 fetching corpus: 29050, signal 633617/673529 (executing program) 2021/03/14 14:28:41 fetching corpus: 29100, signal 633912/673529 (executing program) 2021/03/14 14:28:41 fetching corpus: 29150, signal 634244/673529 (executing program) 2021/03/14 14:28:41 fetching corpus: 29200, signal 634448/673529 (executing program) 2021/03/14 14:28:41 fetching corpus: 29250, signal 634657/673529 (executing program) 2021/03/14 14:28:41 fetching corpus: 29300, signal 635261/673529 (executing program) 2021/03/14 14:28:42 fetching corpus: 29350, signal 635451/673531 (executing program) 2021/03/14 14:28:42 fetching corpus: 29400, signal 635957/673531 (executing program) 2021/03/14 14:28:42 fetching corpus: 29450, signal 636225/673531 (executing program) 2021/03/14 14:28:42 fetching corpus: 29500, signal 636412/673531 (executing program) 2021/03/14 14:28:42 fetching corpus: 29550, signal 636665/673531 (executing program) 2021/03/14 14:28:42 fetching corpus: 29600, signal 636959/673531 (executing program) 2021/03/14 14:28:42 fetching corpus: 29650, signal 637153/673531 (executing program) 2021/03/14 14:28:43 fetching corpus: 29700, signal 637704/673531 (executing program) 2021/03/14 14:28:43 fetching corpus: 29750, signal 638099/673533 (executing program) 2021/03/14 14:28:43 fetching corpus: 29800, signal 638326/673533 (executing program) 2021/03/14 14:28:43 fetching corpus: 29850, signal 638544/673533 (executing program) 2021/03/14 14:28:43 fetching corpus: 29900, signal 638943/673533 (executing program) 2021/03/14 14:28:43 fetching corpus: 29950, signal 639248/673533 (executing program) 2021/03/14 14:28:44 fetching corpus: 30000, signal 639698/673533 (executing program) 2021/03/14 14:28:44 fetching corpus: 30050, signal 639886/673533 (executing program) 2021/03/14 14:28:44 fetching corpus: 30100, signal 640078/673533 (executing program) 2021/03/14 14:28:44 fetching corpus: 30150, signal 640590/673533 (executing program) 2021/03/14 14:28:44 fetching corpus: 30200, signal 640815/673533 (executing program) 2021/03/14 14:28:45 fetching corpus: 30250, signal 641160/673533 (executing program) 2021/03/14 14:28:45 fetching corpus: 30300, signal 641778/673533 (executing program) 2021/03/14 14:28:45 fetching corpus: 30350, signal 642023/673533 (executing program) 2021/03/14 14:28:45 fetching corpus: 30400, signal 642248/673533 (executing program) 2021/03/14 14:28:45 fetching corpus: 30450, signal 642506/673540 (executing program) 2021/03/14 14:28:45 fetching corpus: 30500, signal 642721/673540 (executing program) 2021/03/14 14:28:46 fetching corpus: 30550, signal 642853/673540 (executing program) 2021/03/14 14:28:46 fetching corpus: 30600, signal 643078/673540 (executing program) 2021/03/14 14:28:46 fetching corpus: 30650, signal 643298/673540 (executing program) 2021/03/14 14:28:46 fetching corpus: 30700, signal 643713/673540 (executing program) 2021/03/14 14:28:46 fetching corpus: 30750, signal 643967/673541 (executing program) 2021/03/14 14:28:47 fetching corpus: 30800, signal 644147/673551 (executing program) 2021/03/14 14:28:47 fetching corpus: 30850, signal 644872/673551 (executing program) 2021/03/14 14:28:47 fetching corpus: 30900, signal 645035/673551 (executing program) 2021/03/14 14:28:47 fetching corpus: 30950, signal 645288/673551 (executing program) 2021/03/14 14:28:47 fetching corpus: 31000, signal 645964/673553 (executing program) 2021/03/14 14:28:47 fetching corpus: 31050, signal 646167/673553 (executing program) 2021/03/14 14:28:48 fetching corpus: 31100, signal 646326/673553 (executing program) 2021/03/14 14:28:48 fetching corpus: 31150, signal 646520/673553 (executing program) 2021/03/14 14:28:48 fetching corpus: 31200, signal 646821/673553 (executing program) 2021/03/14 14:28:48 fetching corpus: 31250, signal 647009/673553 (executing program) 2021/03/14 14:28:48 fetching corpus: 31300, signal 647311/673553 (executing program) 2021/03/14 14:28:48 fetching corpus: 31350, signal 648272/673553 (executing program) 2021/03/14 14:28:49 fetching corpus: 31400, signal 648504/673553 (executing program) 2021/03/14 14:28:49 fetching corpus: 31450, signal 648690/673553 (executing program) 2021/03/14 14:28:49 fetching corpus: 31500, signal 648848/673553 (executing program) 2021/03/14 14:28:49 fetching corpus: 31550, signal 649080/673553 (executing program) 2021/03/14 14:28:49 fetching corpus: 31600, signal 649370/673553 (executing program) 2021/03/14 14:28:50 fetching corpus: 31650, signal 649580/673553 (executing program) 2021/03/14 14:28:50 fetching corpus: 31700, signal 649830/673553 (executing program) 2021/03/14 14:28:50 fetching corpus: 31750, signal 650575/673553 (executing program) 2021/03/14 14:28:50 fetching corpus: 31800, signal 650802/673553 (executing program) 2021/03/14 14:28:51 fetching corpus: 31850, signal 651052/673553 (executing program) 2021/03/14 14:28:51 fetching corpus: 31900, signal 651361/673553 (executing program) 2021/03/14 14:28:51 fetching corpus: 31950, signal 651739/673553 (executing program) 2021/03/14 14:28:52 fetching corpus: 32000, signal 651931/673553 (executing program) 2021/03/14 14:28:52 fetching corpus: 32050, signal 652130/673553 (executing program) 2021/03/14 14:28:52 fetching corpus: 32100, signal 652310/673553 (executing program) [ 225.787014][ T3408] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.795706][ T3408] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/14 14:28:52 fetching corpus: 32150, signal 652613/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32200, signal 652779/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32250, signal 653023/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32300, signal 653287/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32350, signal 653500/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32400, signal 653675/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32450, signal 654179/673553 (executing program) 2021/03/14 14:28:53 fetching corpus: 32500, signal 654405/673555 (executing program) 2021/03/14 14:28:54 fetching corpus: 32550, signal 654672/673555 (executing program) 2021/03/14 14:28:54 fetching corpus: 32600, signal 654919/673555 (executing program) 2021/03/14 14:28:54 fetching corpus: 32650, signal 655398/673555 (executing program) 2021/03/14 14:28:54 fetching corpus: 32700, signal 655552/673555 (executing program) 2021/03/14 14:28:54 fetching corpus: 32750, signal 655864/673555 (executing program) 2021/03/14 14:28:54 fetching corpus: 32800, signal 656093/673555 (executing program) 2021/03/14 14:28:55 fetching corpus: 32850, signal 656274/673555 (executing program) 2021/03/14 14:28:55 fetching corpus: 32900, signal 656495/673555 (executing program) 2021/03/14 14:28:55 fetching corpus: 32950, signal 656683/673555 (executing program) 2021/03/14 14:28:55 fetching corpus: 33000, signal 656924/673555 (executing program) 2021/03/14 14:28:55 fetching corpus: 33050, signal 657203/673555 (executing program) 2021/03/14 14:28:56 fetching corpus: 33100, signal 657461/673556 (executing program) 2021/03/14 14:28:56 fetching corpus: 33150, signal 657627/673556 (executing program) 2021/03/14 14:28:56 fetching corpus: 33200, signal 657842/673556 (executing program) 2021/03/14 14:28:56 fetching corpus: 33250, signal 658026/673556 (executing program) 2021/03/14 14:28:56 fetching corpus: 33300, signal 658191/673556 (executing program) 2021/03/14 14:28:57 fetching corpus: 33350, signal 658432/673556 (executing program) 2021/03/14 14:28:57 fetching corpus: 33400, signal 658707/673558 (executing program) 2021/03/14 14:28:57 fetching corpus: 33450, signal 658939/673559 (executing program) 2021/03/14 14:28:57 fetching corpus: 33500, signal 659094/673559 (executing program) 2021/03/14 14:28:57 fetching corpus: 33550, signal 659535/673559 (executing program) 2021/03/14 14:28:57 fetching corpus: 33600, signal 659711/673559 (executing program) 2021/03/14 14:28:58 fetching corpus: 33650, signal 659927/673559 (executing program) 2021/03/14 14:28:58 fetching corpus: 33700, signal 660130/673559 (executing program) 2021/03/14 14:28:58 fetching corpus: 33750, signal 660341/673585 (executing program) 2021/03/14 14:28:58 fetching corpus: 33800, signal 660570/673585 (executing program) 2021/03/14 14:28:58 fetching corpus: 33850, signal 660890/673585 (executing program) 2021/03/14 14:28:59 fetching corpus: 33900, signal 661120/673585 (executing program) 2021/03/14 14:28:59 fetching corpus: 33950, signal 661382/673585 (executing program) 2021/03/14 14:28:59 fetching corpus: 34000, signal 661629/673585 (executing program) 2021/03/14 14:28:59 fetching corpus: 34050, signal 661818/673585 (executing program) 2021/03/14 14:28:59 fetching corpus: 34080, signal 661993/673585 (executing program) 2021/03/14 14:28:59 fetching corpus: 34080, signal 661993/673585 (executing program) 2021/03/14 14:29:03 starting 4 fuzzer processes 14:29:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x101, 0x1}, 0x40) 14:29:03 executing program 1: select(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 14:29:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7, 0x4) 14:29:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 237.780472][ T8643] IPVS: ftp: loaded support on port[0] = 21 [ 237.909579][ T8643] chnl_net:caif_netlink_parms(): no params data found [ 238.006301][ T8645] IPVS: ftp: loaded support on port[0] = 21 [ 238.025984][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.037138][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.047984][ T8643] device bridge_slave_0 entered promiscuous mode [ 238.067899][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.078181][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.091228][ T8643] device bridge_slave_1 entered promiscuous mode [ 238.125152][ T8643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.138810][ T8643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.195899][ T8643] team0: Port device team_slave_0 added [ 238.253867][ T8643] team0: Port device team_slave_1 added [ 238.295376][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.306772][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.340982][ T8643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.358033][ T8645] chnl_net:caif_netlink_parms(): no params data found [ 238.379784][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.389164][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.421038][ T8643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.464980][ T8647] IPVS: ftp: loaded support on port[0] = 21 [ 238.483983][ T8643] device hsr_slave_0 entered promiscuous mode [ 238.492173][ T8643] device hsr_slave_1 entered promiscuous mode [ 238.576522][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.587381][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.599537][ T8645] device bridge_slave_0 entered promiscuous mode [ 238.616661][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.624999][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.633758][ T8645] device bridge_slave_1 entered promiscuous mode [ 238.671572][ T8645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.700699][ T8645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.725684][ T8649] IPVS: ftp: loaded support on port[0] = 21 [ 238.741902][ T8645] team0: Port device team_slave_0 added [ 238.757351][ T8645] team0: Port device team_slave_1 added [ 238.793346][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.803345][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.842215][ T8645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.880325][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.891381][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.927370][ T8645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.030571][ T8645] device hsr_slave_0 entered promiscuous mode [ 239.041004][ T8645] device hsr_slave_1 entered promiscuous mode [ 239.052323][ T8645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.065566][ T8645] Cannot create hsr debugfs directory [ 239.076875][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 239.128806][ T8643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.141039][ T8643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.196810][ T8643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.210478][ T8643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.281634][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.292619][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.301962][ T8647] device bridge_slave_0 entered promiscuous mode [ 239.321965][ T8649] chnl_net:caif_netlink_parms(): no params data found [ 239.342095][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.352127][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.362667][ T8647] device bridge_slave_1 entered promiscuous mode [ 239.446325][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.465170][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.491293][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.504301][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.515402][ T8649] device bridge_slave_0 entered promiscuous mode [ 239.529070][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.544354][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.556341][ T8649] device bridge_slave_1 entered promiscuous mode [ 239.607197][ T8647] team0: Port device team_slave_0 added [ 239.633280][ T8649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.646994][ T8647] team0: Port device team_slave_1 added [ 239.668530][ T8649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.688250][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.698206][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.730814][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.747631][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.759258][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.793260][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.794765][ T30] Bluetooth: hci0: command 0x0409 tx timeout [ 239.855323][ T8649] team0: Port device team_slave_0 added [ 239.870001][ T8645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.897176][ T8649] team0: Port device team_slave_1 added [ 239.906038][ T8645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.931836][ T8647] device hsr_slave_0 entered promiscuous mode [ 239.941161][ T8647] device hsr_slave_1 entered promiscuous mode [ 239.951577][ T8647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.961134][ T8647] Cannot create hsr debugfs directory [ 239.991815][ T8645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.008949][ T8645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.028845][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.033477][ T3324] Bluetooth: hci1: command 0x0409 tx timeout [ 240.038767][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.085640][ T8649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.103669][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.112774][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.148013][ T8649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.251253][ T8649] device hsr_slave_0 entered promiscuous mode [ 240.261557][ T8649] device hsr_slave_1 entered promiscuous mode [ 240.274004][ T8649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.282222][ T8649] Cannot create hsr debugfs directory [ 240.299527][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.359421][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.368796][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.416090][ T8643] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.435969][ T3324] Bluetooth: hci2: command 0x0409 tx timeout [ 240.439678][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.455664][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.467621][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.478550][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.507845][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.519245][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.533223][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.545733][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.554876][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.641236][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.654840][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.669906][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.672550][ T3916] Bluetooth: hci3: command 0x0409 tx timeout [ 240.682973][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.702229][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.714619][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.754935][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.764989][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.781938][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.816075][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.835119][ T8647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.851221][ T8643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.868912][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.889588][ T8647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.905381][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.918612][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.944129][ T8647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.956628][ T8647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.972795][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.981805][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.997124][ T8645] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.021983][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.031792][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.044462][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.053604][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.065258][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.074553][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.084354][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.115572][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.136368][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.150741][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.162698][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.171235][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.180868][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.204919][ T8649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.225491][ T8649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.263175][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.276281][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.289796][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.305376][ T8649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.322816][ T8649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.352672][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.366864][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.380322][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.411970][ T8645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.425647][ T8645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.445377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.457055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.469113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.481040][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.492869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.508388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.529819][ T8643] device veth0_vlan entered promiscuous mode [ 241.556399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.568454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.582258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.596393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.606488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.636248][ T8643] device veth1_vlan entered promiscuous mode [ 241.677140][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.689299][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.700501][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.726753][ T8645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.783591][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.801101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.813264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.824986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.841929][ T8643] device veth0_macvtap entered promiscuous mode [ 241.863075][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 241.864607][ T8649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.882883][ T8643] device veth1_macvtap entered promiscuous mode [ 241.893482][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.906512][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.916782][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.926050][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.943633][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.979331][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.009229][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.040913][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.055875][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.068239][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.078385][ T9428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.089234][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.109631][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.121583][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.131390][ T9428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.143865][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.155919][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 242.162606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.176730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.199863][ T8645] device veth0_vlan entered promiscuous mode [ 242.213436][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.225683][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.238520][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.255241][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.269258][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.283424][ T8649] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.299662][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.328619][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.339086][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.352983][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.366745][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.380488][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.393380][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.407860][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.424648][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.437044][ T8643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.448053][ T8643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.459805][ T8643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.472558][ T8643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.498110][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.503174][ T9299] Bluetooth: hci2: command 0x041b tx timeout [ 242.508651][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.527926][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.540653][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.553513][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.569235][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.577280][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.591540][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.615898][ T8645] device veth1_vlan entered promiscuous mode [ 242.638526][ T8647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.652942][ T8647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.670053][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.687645][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.699654][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.715590][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.728530][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.743452][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.743650][ T9423] Bluetooth: hci3: command 0x041b tx timeout [ 242.755459][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.774463][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.783655][ T9428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.795184][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.897030][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.907689][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.920792][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.933729][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.948222][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.965019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.982824][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.000797][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.063408][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.084993][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.097043][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.107737][ T8649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.107762][ T8649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.133111][ T8649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.147590][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.170063][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.181417][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.193521][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.206364][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.218821][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.227650][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.238542][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.250514][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.262076][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.298490][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.315294][ T8645] device veth0_macvtap entered promiscuous mode [ 243.315438][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.327833][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.349207][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.383543][ T8645] device veth1_macvtap entered promiscuous mode [ 243.394904][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.409021][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.422636][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.436533][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.460350][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.473264][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.497732][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.509510][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.523502][ T8647] device veth0_vlan entered promiscuous mode [ 243.543757][ T8647] device veth1_vlan entered promiscuous mode [ 243.573410][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.585749][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 14:29:10 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x23, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 243.600111][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.614011][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.629079][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.647388][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.671074][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.689066][ T8649] device veth0_vlan entered promiscuous mode [ 243.697983][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 14:29:10 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcsu\x00', 0x0, 0x0) io_uring_setup(0x56fa, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 243.709851][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.723081][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.736562][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.759761][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.778932][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.780158][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.807356][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.820275][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:29:10 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000440)='fscrypt-provisioning\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) [ 243.841100][ T8645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.857113][ T8645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.868875][ T8645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.880733][ T8645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.895143][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.906986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.920965][ T8647] device veth0_macvtap entered promiscuous mode [ 243.936530][ T8647] device veth1_macvtap entered promiscuous mode [ 243.952565][ T49] Bluetooth: hci0: command 0x040f tx timeout 14:29:10 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) [ 243.954773][ T8649] device veth1_vlan entered promiscuous mode 14:29:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 244.049912][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.068420][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.084155][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.101006][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.130086][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.148273][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.172946][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.182706][ T20] Bluetooth: hci1: command 0x040f tx timeout [ 244.190026][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.209844][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.222814][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.242807][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.253593][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.265131][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.276110][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.285916][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.298835][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.313370][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.326429][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.355395][ T8647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.369399][ T8647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.382084][ T8647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.394074][ T8647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.417345][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.436314][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.445867][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.462210][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.473365][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.488223][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.501282][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.514303][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.530690][ T8649] device veth0_macvtap entered promiscuous mode [ 244.546229][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.563972][ T8649] device veth1_macvtap entered promiscuous mode [ 244.588983][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 244.607975][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.624892][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.638804][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.653681][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.666682][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.678714][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.691759][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.706904][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.716359][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.726241][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.744422][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.758789][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.771348][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.783188][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.797203][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.810708][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.822671][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 244.824439][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.846860][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.867618][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 14:29:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x10041, 0x0, 0x0) [ 244.868596][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.880092][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.903164][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.913643][ T8649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.924674][ T8649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.936601][ T8649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.948053][ T8649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.967227][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.981152][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.003539][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.073425][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.095581][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.110841][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 14:29:12 executing program 2: mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 245.137087][ T9033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.146929][ T9033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.158096][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:29:12 executing program 3: socketpair(0x2, 0x0, 0x1ff, &(0x7f0000000100)) 14:29:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 14:29:12 executing program 1: socketpair(0x11, 0x0, 0x8, &(0x7f0000000240)) 14:29:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6c8, &(0x7f0000000040), 0x4) 14:29:12 executing program 2: perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42006}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:29:12 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10000, 0x0) 14:29:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), 0x4) 14:29:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xc100, 0x0) 14:29:12 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3371}, 0x0, 0x0, r0, 0xb) 14:29:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="da"], 0x34}}, 0x0) 14:29:12 executing program 3: perf_event_open(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3371}, 0x0, 0x0, 0xffffffffffffffff, 0xb) 14:29:12 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00'}, 0x10) 14:29:12 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20141, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all='unlock all\x00', 0xb) 14:29:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 14:29:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp]}, &(0x7f0000000180)='GPL\x00', 0x6, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, 0x0}, 0x78) 14:29:12 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) 14:29:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_MAP_FREEZE(0xb, &(0x7f0000000080)=r0, 0x4) 14:29:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl0\x00', 0x0}) 14:29:12 executing program 1: pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40811, r0, 0x10000000) 14:29:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x7, 0x4) 14:29:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x4040801) 14:29:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80104592, 0x0) 14:29:12 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xff, 0x20001) write$char_usb(r0, &(0x7f0000000040)="88425076b280dd595dc63d7dac1f9da9548a1cc7849f1ad0b084da10399c3da75c", 0x21) [ 246.033220][ T9428] Bluetooth: hci0: command 0x0419 tx timeout [ 246.274377][ T9463] Bluetooth: hci1: command 0x0419 tx timeout 14:29:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000001140)) 14:29:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x40) 14:29:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 14:29:13 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:29:13 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x8}, 0x0, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 14:29:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1}, 0x40) 14:29:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 14:29:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, 0x0, 0x7) 14:29:13 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) 14:29:13 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) 14:29:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 14:29:13 executing program 2: syz_usb_connect$uac1(0x0, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x8, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x81}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x1, "b3"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, 'L}'}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x0, 0x2, '7'}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x0, "943aebac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0xa3, "8c97c4590506abed06"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x2, 0x6, {0x7, 0x25, 0x1, 0x101, 0x46, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7, "b2"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x63, 0x1, 0x9, 0x7, "d787a1dd"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x1, 0x8, 0x4, "4696c93bf9c851"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd1, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x9d, 0x80, {0x7, 0x25, 0x1, 0x1, 0x3, 0xafe9}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x0, 0x0, 0x2, [{0x7d, &(0x7f0000000180)=@string={0x7d, 0x3, "849f4f42deb4d5ff5446a5404a307c4fdc9ce00feeb96d9cc533db2504319a85f188eddcf1c0efbd402b9eeeca562dab6597d9cb8fd2ec23f0ebc4e746b3feb1b1abcbd346faa470b5c3f2d851658cd6e4b946aaf25faa8ab57840b5de0201a97c49430d7176040b703cf4d0b5117eddd3072922a53813bd290c43"}}, {0x75, &(0x7f0000000200)=@string={0x75, 0x3, "ae1217c240d545c0be15f60f11cc5d588337887bdd8e3adfcd3e85deeac3692cfd4d10d097001c75b35ff9905ec36791d9924b3229460b857202ed6fb590acb2a34bca62a06949f92105ea2f703b7cb8cfe77b25830861ea22ad41a21fc1b1688a02d27a9b1ebd4772f05bc02675cc8252bf58"}}]}) 14:29:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @generic={0x0, "7ad0992ca01421aa142e0f752e79"}, @ipx={0x4, 0x0, 0x0, "c8d4fc19b7ea"}, @l2={0x1f, 0x0, @fixed}}) [ 246.673078][ T9463] Bluetooth: hci2: command 0x0419 tx timeout 14:29:13 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000006c0)=[{}], 0x1, 0x0) 14:29:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xffffffffffffffff, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 14:29:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 246.903225][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 246.932772][ T9299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 247.002617][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 247.192723][ T9299] usb 6-1: Using ep0 maxpacket: 8 [ 247.252597][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 247.332679][ T9299] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 247.348586][ T9299] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 247.412990][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 247.513158][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.527813][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.541213][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 247.563215][ T9299] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.576636][ T9299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.590256][ T9299] usb 6-1: Product: syz [ 247.596872][ T9299] usb 6-1: Manufacturer: syz [ 247.603188][ T9299] usb 6-1: SerialNumber: syz [ 247.644706][ T9725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 247.655017][ T9725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 247.743462][ T25] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.756854][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.768943][ T25] usb 7-1: Product: syz [ 247.777537][ T25] usb 7-1: Manufacturer: ኮ숗핀쁅ᖾ࿶찑塝㞃箈軝㻍쏪Ⱪ䷽퀐—甜徳郹썞酧鋙㉋䘩蔋ɲ濭邵늬䮣拊榠雷ԡ⿪㭰롼╻ࢃ괢ꉁ섟梱ʊ竒ẛ䞽쁛甦苌뽒 [ 247.804514][ T25] usb 7-1: SerialNumber: syz [ 247.946382][ T9299] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 247.971203][ T9299] usb 6-1: USB disconnect, device number 2 [ 248.213018][ T25] usb 7-1: 0:2 : does not exist [ 248.252099][ T25] usb 7-1: USB disconnect, device number 2 [ 248.672874][ T9521] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.853732][ T3324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 248.922591][ T9521] usb 6-1: Using ep0 maxpacket: 8 [ 249.072760][ T9521] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 249.089338][ T9521] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 249.122658][ T3324] usb 7-1: Using ep0 maxpacket: 8 [ 249.283397][ T3324] usb 7-1: unable to get BOS descriptor or descriptor too short [ 249.302613][ T9521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.313570][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.330523][ T9521] usb 6-1: Product: syz [ 249.337930][ T9521] usb 6-1: Manufacturer: syz [ 249.345473][ T9521] usb 6-1: SerialNumber: syz [ 249.382989][ T3324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.384331][ T9725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 249.397550][ T3324] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.409874][ T9725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 249.424432][ T3324] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 14:29:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0xffffff88, 0xa, 0x0, 0x0) 14:29:16 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a4400001020301090255"], 0x0) 14:29:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) [ 249.662904][ T3324] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.679133][ T3324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.696636][ T3324] usb 7-1: Product: syz [ 249.702120][ T3324] usb 7-1: Manufacturer: ኮ숗핀쁅ᖾ࿶찑塝㞃箈軝㻍쏪Ⱪ䷽퀐—甜徳郹썞酧鋙㉋䘩蔋ɲ濭邵늬䮣拊榠雷ԡ⿪㭰롼╻ࢃ괢ꉁ섟梱ʊ竒ẛ䞽쁛甦苌뽒 [ 249.714157][ T9521] cdc_ether: probe of 6-1:1.0 failed with error -71 14:29:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xc66701d7a0381485, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x0, 0x90, 0x23, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "64ee"}, {0x5, 0x24, 0x0, 0xdc7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x5, 0x20}, {0x6, 0x24, 0x1a, 0x8001, 0x16}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1ff, 0x3, 0xe0, 0x0, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x21, 0x1, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x9f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1f, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x4, 0x0, 0x4, 0x10, 0x9}, 0xd7, &(0x7f00000003c0)={0x5, 0xf, 0xd7, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "71cd90c15bf41750e4fca6854e2991c3"}, @generic={0xa2, 0x10, 0x3, "24624e8d6a686b689e50fddddbbd5fb3935294eecdfb1b7976701d4b6a234623856035d15b664ed877e4ff12e3be20c67212cf8e8f0bb6d1d4c9eee4d5275a930cf7aae43d21e20ecf15696b9875d299b1895b0ecef11c6bcaf1054db1185752cb319d3f957e68f524ea92f75fcf43800f5cdd4034adc6ad7af14b346077cf0e61c3195ab3a44994b4f8393f83463d70d0da2b11bcb4eac8620b1f1065edd2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x27, 0x4, 0x0, 0xff00, 0x8, [0xc000, 0x0, 0x0, 0x30]}]}, 0x1, [{0x2, &(0x7f0000000500)=@string={0x2}}]}) socket(0x9, 0xa, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @data_frame={@qos_ht={{{@type10={{}, {}, @random="57891b23fa12", @device_b, @broadcast}}, {@type10={{}, {}, @from_mac=@broadcast}}}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x0) 14:29:16 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 249.733159][ T3324] usb 7-1: SerialNumber: syz [ 249.745859][ T9521] usb 6-1: USB disconnect, device number 3 [ 249.773822][ T3324] usb 7-1: can't set config #1, error -71 [ 249.788545][ T3324] usb 7-1: USB disconnect, device number 3 14:29:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) 14:29:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) 14:29:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) [ 249.932628][ T9428] usb 8-1: new high-speed USB device number 2 using dummy_hcd 14:29:16 executing program 1: ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) 14:29:16 executing program 1: ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) [ 250.092767][ T38] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 250.212631][ T9428] usb 8-1: Using ep0 maxpacket: 8 [ 250.222748][ T3324] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 250.354975][ T9428] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.374172][ T9428] usb 8-1: config 0 has no interfaces? [ 250.472542][ T3324] usb 7-1: Using ep0 maxpacket: 16 [ 250.503001][ T38] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 250.553463][ T9428] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.565882][ T9428] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.578300][ T9428] usb 8-1: Product: syz [ 250.584699][ T9428] usb 8-1: Manufacturer: syz [ 250.589984][ T9428] usb 8-1: SerialNumber: syz [ 250.601664][ T9428] usb 8-1: config 0 descriptor?? [ 250.604613][ T3324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 250.625501][ T3324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.641168][ T3324] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.654795][ T3324] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.667092][ T3324] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 250.723569][ T3324] usb 7-1: language id specifier not provided by device, defaulting to English [ 250.813300][ T38] usb 5-1: string descriptor 0 read error: -22 [ 250.821009][ T38] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.833698][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.861164][ T9428] usb 8-1: USB disconnect, device number 2 [ 250.893051][ T3324] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.904819][ T38] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 250.916758][ T3324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.929762][ T3324] usb 7-1: Product: syz [ 250.936008][ T3324] usb 7-1: Manufacturer: syz [ 250.942282][ T3324] usb 7-1: SerialNumber: syz [ 251.101688][ T38] usb 5-1: USB disconnect, device number 2 [ 251.243193][ T3324] cdc_ncm 7-1:1.0: bind() failure [ 251.256111][ T3324] cdc_ncm 7-1:1.1: bind() failure [ 251.267445][ T3324] usb 7-1: USB disconnect, device number 4 [ 251.652541][ T20] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 251.872656][ T3315] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 251.903730][ T20] usb 8-1: Using ep0 maxpacket: 8 [ 251.982843][ T3324] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 252.042888][ T20] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.058381][ T20] usb 8-1: config 0 has no interfaces? [ 252.242611][ T3324] usb 7-1: Using ep0 maxpacket: 16 [ 252.243439][ T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.243740][ T3315] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 252.290745][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.307842][ T20] usb 8-1: Product: syz [ 252.317843][ T20] usb 8-1: Manufacturer: syz [ 252.324165][ T20] usb 8-1: SerialNumber: syz [ 252.335795][ T20] usb 8-1: config 0 descriptor?? [ 252.383144][ T3324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 252.399726][ T3324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.414735][ T3324] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.430741][ T3324] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 252.446307][ T3324] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 252.482868][ T3315] usb 5-1: string descriptor 0 read error: -22 [ 252.492155][ T3315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.492863][ T3324] usb 7-1: language id specifier not provided by device, defaulting to English [ 252.507169][ T3315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.564728][ T3315] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 252.595383][ T20] usb 8-1: USB disconnect, device number 3 14:29:19 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 252.670511][ T3324] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.683657][ T3324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.697165][ T3324] usb 7-1: Product: syz [ 252.704801][ T3324] usb 7-1: Manufacturer: syz [ 252.710742][ T3324] usb 7-1: SerialNumber: syz [ 252.772647][ T9423] usb 5-1: USB disconnect, device number 3 14:29:19 executing program 2: socketpair(0x18, 0x0, 0x400, &(0x7f0000000000)) 14:29:19 executing program 1: ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) 14:29:19 executing program 3: r0 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='R', 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 14:29:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x24}}, 0x0) [ 252.902735][ T3324] cdc_ncm 7-1:1.0: bind() failure [ 252.921409][ T3324] cdc_ncm 7-1:1.1: bind() failure [ 252.923598][ T9909] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 14:29:19 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) [ 252.941156][ T3324] usb 7-1: USB disconnect, device number 5 [ 252.965588][ T9918] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 14:29:19 executing program 3: request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0) 14:29:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x16f}]]}, 0x24}}, 0x0) 14:29:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ecab3a56"}, 0x0, 0x0, @planes=0x0}) 14:29:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xc0481273, 0x0) 14:29:20 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) 14:29:20 executing program 2: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x4000) 14:29:20 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x4031, 0xffffffffffffffff, 0x8000000) 14:29:20 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) 14:29:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x127a, 0x0) 14:29:20 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0x0) 14:29:20 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x306280, 0x0) read$snapshot(r0, 0x0, 0x0) 14:29:20 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) 14:29:20 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025500010180100809040000030206004506240600009505240001000d240f01ffffffff92f804000203"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x23}}]}) 14:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}}, 0x0) 14:29:20 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) 14:29:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x40101283, 0x0) 14:29:20 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) [ 253.472579][ T3315] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 253.562719][ T3324] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 253.722918][ T3315] usb 8-1: Using ep0 maxpacket: 8 [ 253.832683][ T3324] usb 7-1: Using ep0 maxpacket: 8 [ 253.863464][ T3315] usb 8-1: config 0 has no interfaces? [ 253.982732][ T3324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.997293][ T3324] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.033534][ T3315] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.044366][ T3315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.054434][ T3315] usb 8-1: Product: syz [ 254.060232][ T3315] usb 8-1: Manufacturer: syz [ 254.067300][ T3315] usb 8-1: SerialNumber: syz [ 254.077628][ T3315] usb 8-1: config 0 descriptor?? [ 254.192939][ T3324] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.208257][ T3324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.221053][ T3324] usb 7-1: Product: syz [ 254.227911][ T3324] usb 7-1: Manufacturer: # [ 254.234164][ T3324] usb 7-1: SerialNumber: syz [ 254.332138][ T3315] usb 8-1: USB disconnect, device number 4 [ 254.563809][ T3324] cdc_ether 7-1:1.0: skipping garbage [ 254.595855][ T3324] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 254.610776][ T3324] usb 7-1: USB disconnect, device number 6 [ 255.102677][ T3315] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 255.282562][ T9423] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 255.372689][ T3315] usb 8-1: Using ep0 maxpacket: 8 [ 255.512708][ T3315] usb 8-1: config 0 has no interfaces? [ 255.542560][ T9423] usb 7-1: Using ep0 maxpacket: 8 [ 255.662810][ T9423] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.673677][ T9423] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.713003][ T3315] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.725195][ T3315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.738791][ T3315] usb 8-1: Product: syz [ 255.745231][ T3315] usb 8-1: Manufacturer: syz [ 255.751605][ T3315] usb 8-1: SerialNumber: syz [ 255.761692][ T3315] usb 8-1: config 0 descriptor?? [ 255.853182][ T9423] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.867702][ T9423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.882180][ T9423] usb 7-1: Product: syz [ 255.889922][ T9423] usb 7-1: Manufacturer: # [ 255.897314][ T9423] usb 7-1: SerialNumber: syz 14:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae08, 0x0) 14:29:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "26583ca6"}, 0x0, 0x0, @userptr}) 14:29:22 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) [ 256.033125][ T3315] usb 8-1: USB disconnect, device number 5 14:29:23 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025500010180100809040000030206004506240600009505240001000d240f01ffffffff92f804000203"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x23}}]}) 14:29:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) 14:29:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000055000000080001000000000008000300", @ANYRES32=r2], 0x24}}, 0x0) 14:29:23 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902550001"], 0x0) 14:29:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) 14:29:23 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) [ 256.263687][ T9423] cdc_ether 7-1:1.0: skipping garbage [ 256.269820][ T9423] cdc_ether: probe of 7-1:1.0 failed with error -22 14:29:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xa, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 256.312847][ T9423] usb 7-1: USB disconnect, device number 7 14:29:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cc385f0"}, 0x0, 0x0, @planes=0x0}) [ 256.552563][ T3315] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 256.722844][ T9423] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 256.842536][ T3315] usb 8-1: Using ep0 maxpacket: 8 [ 256.963986][ T3315] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.979090][ T3315] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.992710][ T9423] usb 7-1: Using ep0 maxpacket: 8 [ 257.132780][ T9423] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.148455][ T9423] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.173761][ T3315] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.191365][ T3315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.202688][ T3315] usb 8-1: Product: syz [ 257.208160][ T3315] usb 8-1: Manufacturer: syz [ 257.215915][ T3315] usb 8-1: SerialNumber: syz [ 257.230563][ T3315] usb 8-1: config 0 descriptor?? [ 257.322978][ T9423] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.333858][ T9423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.343701][ T9423] usb 7-1: Product: syz [ 257.349879][ T9423] usb 7-1: Manufacturer: # [ 257.356026][ T9423] usb 7-1: SerialNumber: syz [ 257.486467][ T3315] usb 8-1: USB disconnect, device number 6 [ 257.684024][ T9423] cdc_ether 7-1:1.0: skipping garbage [ 257.697975][ T9423] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 257.727803][ T9423] usb 7-1: USB disconnect, device number 8 14:29:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 14:29:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x5450, 0x0) 14:29:25 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) [ 258.252596][ T9299] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 258.512876][ T9299] usb 8-1: Using ep0 maxpacket: 8 [ 258.662874][ T9299] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.678688][ T9299] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.842960][ T9299] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.856493][ T9299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.866426][ T9299] usb 8-1: Product: syz [ 258.871304][ T9299] usb 8-1: Manufacturer: syz [ 258.878276][ T9299] usb 8-1: SerialNumber: syz [ 258.899453][ T9299] usb 8-1: config 0 descriptor?? [ 259.145771][ T9463] usb 8-1: USB disconnect, device number 7 14:29:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 14:29:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002500)='/dev/autofs\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r1, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 14:29:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 14:29:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 259.181746][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.196589][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:29:26 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000340), 0x4, 0x0) [ 259.234389][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.281019][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:29:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x5452, 0x0) [ 259.308201][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.319035][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:29:26 executing program 1: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 14:29:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xc0045878, 0x0) [ 259.692786][ T9484] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 259.942859][ T9484] usb 6-1: Using ep0 maxpacket: 16 [ 260.072743][ T9484] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:29:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="17000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000088"], 0x930}}, 0x0) 14:29:27 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000001040)={&(0x7f0000000040)="ef4f370af40c0b2022ea085089ac03fec102a6385201e78b510d670c7dc4b8ffda3f457364ab707cc16dfab6bff9e0d3c01201d60c12b423a1fc2e524db50307de13de98fbcb2e852549f55a6ac6112f0de8ff111c5b9599a6fbcc55803d9355bd2f954a21e49a7291a29808c2", 0x6d}}, 0x0) [ 260.102988][ T9484] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:29:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1277, 0x0) [ 260.121856][ T9484] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.143336][ T9484] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 14:29:27 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 260.172374][ T9484] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.189792][ T9484] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 14:29:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) 14:29:27 executing program 2: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x28643) [ 260.247838][T10135] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.263614][T10136] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.372686][ T9484] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.384952][ T9484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.396702][ T9484] usb 6-1: Product: syz [ 260.401920][ T9484] usb 6-1: Manufacturer: syz [ 260.408876][ T9484] usb 6-1: SerialNumber: syz [ 260.692687][ T9484] cdc_ncm 6-1:1.0: bind() failure [ 260.704315][ T9484] cdc_ncm 6-1:1.1: bind() failure [ 260.716789][ T9484] usb 6-1: USB disconnect, device number 4 [ 261.432565][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.692858][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 261.812727][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.826290][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.875410][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.888309][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 261.903842][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.922626][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 262.093044][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.106153][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.122724][ T25] usb 6-1: Product: syz [ 262.128129][ T25] usb 6-1: Manufacturer: syz [ 262.136819][ T25] usb 6-1: SerialNumber: syz 14:29:29 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x183203, 0x0) 14:29:29 executing program 3: io_uring_setup(0x2dcd, &(0x7f0000000040)={0x0, 0x0, 0x4}) 14:29:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1276, 0x0) 14:29:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1269, 0x0) [ 262.442900][ T25] cdc_ncm 6-1:1.0: bind() failure 14:29:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8}, @void}}}, 0x1c}}, 0x0) 14:29:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 14:29:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x40101286, 0x0) [ 262.465487][ T25] cdc_ncm 6-1:1.1: bind() failure [ 262.477046][ T25] usb 6-1: USB disconnect, device number 5 14:29:29 executing program 0: socket(0x0, 0x80402, 0x0) [ 262.516322][T10180] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 262.530987][T10183] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 14:29:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x40101288, 0x0) 14:29:29 executing program 0: r0 = socket(0xa, 0x6, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:29:29 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1c11]}, 0x8}) 14:29:29 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8}, @void}}}, 0x24}}, 0x0) 14:29:29 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x56}, @val={0xc}}}}, 0x28}}, 0x0) 14:29:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 14:29:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x301, 0x0) 14:29:29 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x930, r1, 0x1, 0x0, 0x0, {{}, {@val={0x4}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "849a94b3b3da272e52de486189168a6ae543e1a6426c99d6bfca8ff150bb4e5777b49f3888f3e64cf817276c79d8323f812186df6c71f1e1cf6a77d3ab8214b3962627c93351c372c5deeb100345a00650e83abdce9fd242378a6f87a8191c19509699228ba6cc17b4f347209fcb20aaded355fda5b429cd9dd9deaf945f1ac7d194dbc2f6314da3a4bd749b727df4b7967be442d3198433d6d3fa8da2c4ecf8e05575832c0431a91578d1b76d112e77ee11fd571a8320a2a789b238a48a2dcf6258fe9a0960185d645287963892a01d766aa3659d1bb6933294815108bbcadd6bce0edcf953d79add9df4695bebc005eb621f7eac8f45c0572a83c51139e8a49cfd637e1f48d76e347236fbfe2f1974a265356e04aaf18c40769e294eaaecfbcf60d264264ce02343cf8de6afd50bd9dd70ab5e2e6923d9b1cfc9fd07d3d1ecdf7053dcc0e04f16c35bf4c5c3f02e1f6695baa5bd9a0336626298fc8ccbe5ce1e5b54636aefccf2d22427e38c14fd2d74ba572030b913057d48d1c3af5c5be04a2b5a73afe931e8e14712269cd654693e75995af0b615539fe839cba5076993b80ba10573420c900d3c11138fc66c4e855ae5936a5b7258123188333fdde994b756ccdc73287bb910968cdc0efd95c96b58d64d51278c4fe1cede9dc5a8af4d6de5547d9f8a3d892e223dbe9b849d2ce923389ae68bbead584484ce6666f0038f85ba32ceed5c1df248f8bd857c767bf8a495ba1ab9c2e02294984881d16e7961e8566612c3d170983582152f00fdce2826cfeeecd0c6e23ea26aecc60205cebc05e6ee68e898eb30adbd748426d65d2d03a8c962241696217432adfe63bab3bafb486d80e4c85614abc322121635cb11000196d003c68cbc6116789fda6c75e113f3df1317050c1da5b44b9be19cdc02d00bc6e5a0ca0153581abda9b189ea90653ecdacb328db328af83c10460eba7bf3c870a54584441b7dc4ba2dace0bde41f7c713a3673264c5a5127fe5f87c8680d5472909df51993ee46213b28c4665d461acc7f9fcb310c566a511ab96045c85227279724bd135d29afdf83887c7d825ea7659f1734d3252afcf2e095ddde148cdcd4b5ef8f03a7a5819d48b24cd9d3f73f9f1b33162733aa2ad1db21eee5e4044ef381c956030519878bd1fadd689d3603c842c36ba47f330cc5d78608f130db83937dada8f015b472cead6dca725a9181c7123a934b08586f30dc18d85c19f0694d18727009cdb3d412ccfe12042be46528e3b0270a5b4948c54daab449e68d71224936f0b7dbe7a3bc1e6dcd7c4d55accba634b78d5d471ddeaed7d1f0804a0bfb67b0ea8b3ecb868507f6142d15d057335f71375769426050cf2ada54773b3fad2a4e3cf16f1d1d01835940d1f3c380035bc286d660a514e2f78f9202dcf7a10a8295f26a1946211059844c19506a579b6aa4b4cb506f3d3fa6efd602d868f211c011704604ad5d3bcfc9299535e16950fd31a9a09a34828f9add7cb731aa4590c7a782f8f51147ef7a8b6e5ccb3882ed7ebe53852643d8220f6e27c68cd5d0e9530070c4e80302722cc8899776eb0d5280dacb9b380e71f74b24e9c316f04b9c80d41ab5dfa1a1f1024b913a4570567c11e9e3093e50c80312cacd3a2bfbd351f8a99266adc5360ec85378704ecd7bda0be1222165995b28e2f5cbfb7ff51f0ff0bdcad80190f51c42688b8bebc9b88ce02f06ff3601ee999c3cc1262d1766273626fdf4b980bb002b3ba0bb686b1b53c4305a5a962468b9e21f3642a2ff8a65a326c4da2f7b63bd94817a23681ac44ebeab7025f512833156673ec80c19dafce1efe9cf4815296bec86acbb2254d92c483438bca056d45b9a579292a28953f9edf24a3c8ee055bdb85e44dafe4c76c42f92d88f4e606361a8dad037aef2601a113cd2b1afd6235baa8ceca925343a6f0088d496eee4f6e2070aa79e2453c0c34110dd7240baabb9aa97fdbcba569067cf97fc4e5f09727c12f131763f9463d74667ede822c6db9afeef326a712ec41514644e1299b98b0e95d044a94cd260f987b4d238d5d7670995ad67268c01bc31498308d23171c1d2341ac5a47c5516d1fe5038d3b20a14bb97ae41ed0a923f49d75e30593e014508aadf848749d98d6489b5e8354139e18627b09b83974ecb31995ab322224d5a11956571fb6e74162bfea936aff17b978a276b955498634d3a6e19465212a965f896c6db24f76102037a8525a7d9be5758b5da288556228cafbc74c9aae1a3c34d4d4b6120d1a057f95922fcf2d66f70bce5f4f321a2058ecabec6072220ed15c94b818ec4121845fb8171cfd9434b20c5ac319fdc7f8da3bdf4eab078a7c2494597264f2f6700e6570e528ff160a7f8ec07814dfcaec182e29699ed132cfbe9eb0825b6bf4041181816852837169b2bb7d61f67ba945924e0d3524f0a4646ceb32e7e707e16d89d3c066339e774d262c31ec6540b15d2d227bbe25977237b0e278565e86ce8dde438f36ac4dd1f75100e5c2350d354c5b39946acd64dce9d62c47cf2ab1b78b75dbbee6333b5b2176a9c7a21f15dc42701f65b05a86cb1df1533c7e991c26bff8b84606c0dffd2cda991343682438f12b4c634d4dfbccc41773a78eb1dca85e08830d5804ef926456157cec86ec93b95ee16a4ca47f10459a0c72424bd003b7c026fb9a7964f374a580250f73cb119eb458e30b92d703018a7bb1c3ec44166d28791b03e273e58fc8002a4dc004e7cddc415e9e7e2de52c308a1c7d8b8fcef0fdb931e684a9de94f579477f5cfdcf37bb119a0eb1c171b0c7e33c27ebe8c0e551c66f1b1c590c5f200794b2b3b2bd4a73f6dd402b299f0e74f75b54f3c939f78aa188fa8ca7c3eff150d17b8d0599bacf3f99d417c5e97aa83a6dea0cd9ca5b4be3b4d18e4ab2436a6f771e318381c34e9a63ff636642773ea9fb640c66db3daf8004794d95b77c59bace109d69c55aa4963e291c54c0118d65470b9becc1c1d763e7c1c0a21f6adc89eea136fb5195011218b89a270478056f7bc40c3dc3e52c1edbfda7a396d9be4c833b978556488b6708800faa9f99d42eec82b1b33121befbf135561"}}]}}}}]}, 0x930}}, 0x0) [ 262.735708][T10218] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 14:29:29 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x127e, 0x0) 14:29:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000aeae91"], 0x1c}}, 0x0) [ 262.751890][T10219] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 14:29:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x930, r1, 0x1, 0x0, 0x0, {{}, {@val={0x4}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "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"}}]}}}}]}, 0x930}}, 0x0) 14:29:29 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)=':\x9f]\x00', &(0x7f0000000080)="ec", 0x1) [ 262.826974][T10228] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 14:29:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 14:29:29 executing program 2: ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x7, 0x4) 14:29:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x34}}, 0x0) 14:29:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab06, 0x0) 14:29:29 executing program 2: ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 0: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) 14:29:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), 0x4) 14:29:29 executing program 2: ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:29 executing program 3: request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000700)={'syz', 0x1}, 0x0, 0xfffffffffffffff9) 14:29:29 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/meminfo\x00', 0x5c, 0x0) 14:29:29 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x20000, 0x0) 14:29:29 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0xfffffffb}, 0x8) 14:29:29 executing program 2: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab00, 0x0) 14:29:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1262, 0x0) 14:29:30 executing program 3: r0 = epoll_create1(0x80000) epoll_wait(r0, &(0x7f00000006c0)=[{}], 0x1, 0x200) 14:29:30 executing program 2: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:30 executing program 2: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:30 executing program 1: r0 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='R', 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, 0x0, 0x0) 14:29:30 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 14:29:30 executing program 2: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:30 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47"}) 14:29:30 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 263.523204][ T9299] usb 5-1: new low-speed USB device number 4 using dummy_hcd 14:29:30 executing program 3: r0 = io_uring_setup(0x4cc4, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000006, 0x13, r0, 0x8000000) 14:29:30 executing program 2: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:30 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 14:29:30 executing program 2: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47", {0x1}}) 14:29:30 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x4000) 14:29:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x10}, @val={0xc, 0x99, {0xa}}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "849a94b3b3da272e52de486189168a6ae543e1a6426c99d6bfca8ff150bb4e5777b49f3888f3e64cf817276c79d8323f812186df6c71f1e1cf6a77d3ab8214b3962627c93351c372c5deeb100345a00650e83abdce9fd242378a6f87a8191c19509699228ba6cc17b4f347209fcb20aaded355fda5b429cd9dd9deaf945f1ac7d194dbc2f6314da3a4bd749b727df4b7967be442d3198433d6d3fa8da2c4ecf8e05575832c0431a91578d1b76d112e77ee11fd571a8320a2a789b238a48a2dcf6258fe9a0960185d645287963892a01d766aa3659d1bb6933294815108bbcadd6bce0edcf953d79add9df4695bebc005eb621f7eac8f45c0572a83c51139e8a49cfd637e1f48d76e347236fbfe2f1974a265356e04aaf18c40769e294eaaecfbcf60d264264ce02343cf8de6afd50bd9dd70ab5e2e6923d9b1cfc9fd07d3d1ecdf7053dcc0e04f16c35bf4c5c3f02e1f6695baa5bd9a0336626298fc8ccbe5ce1e5b54636aefccf2d22427e38c14fd2d74ba572030b913057d48d1c3af5c5be04a2b5a73afe931e8e14712269cd654693e75995af0b615539fe839cba5076993b80ba10573420c900d3c11138fc66c4e855ae5936a5b7258123188333fdde994b756ccdc73287bb910968cdc0efd95c96b58d64d51278c4fe1cede9dc5a8af4d6de5547d9f8a3d892e223dbe9b849d2ce923389ae68bbead584484ce6666f0038f85ba32ceed5c1df248f8bd857c767bf8a495ba1ab9c2e02294984881d16e7961e8566612c3d170983582152f00fdce2826cfeeecd0c6e23ea26aecc60205cebc05e6ee68e898eb30adbd748426d65d2d03a8c962241696217432adfe63bab3bafb486d80e4c85614abc322121635cb11000196d003c68cbc6116789fda6c75e113f3df1317050c1da5b44b9be19cdc02d00bc6e5a0ca0153581abda9b189ea90653ecdacb328db328af83c10460eba7bf3c870a54584441b7dc4ba2dace0bde41f7c713a3673264c5a5127fe5f87c8680d5472909df51993ee46213b28c4665d461acc7f9fcb310c566a511ab96045c85227279724bd135d29afdf83887c7d825ea7659f1734d3252afcf2e095ddde148cdcd4b5ef8f03a7a5819d48b24cd9d3f73f9f1b33162733aa2ad1db21eee5e4044ef381c956030519878bd1fadd689d3603c842c36ba47f330cc5d78608f130db83937dada8f015b472cead6dca725a9181c7123a934b08586f30dc18d85c19f0694d18727009cdb3d412ccfe12042be46528e3b0270a5b4948c54daab449e68d71224936f0b7dbe7a3bc1e6dcd7c4d55accba634b78d5d471ddeaed7d1f0804a0bfb67b0ea8b3ecb868507f6142d15d057335f71375769426050cf2ada54773b3fad2a4e3cf16f1d1d01835940d1f3c380035bc286d660a514e2f78f9202dcf7a10a8295f26a1946211059844c19506a579b6aa4b4cb506f3d3fa6efd602d868f211c011704604ad5d3bcfc9299535e16950fd31a9a09a34828f9add7cb731aa4590c7a782f8f51147ef7a8b6e5ccb3882ed7ebe53852643d8220f6e27c68cd5d0e9530070c4e80302722cc8899776eb0d5280dacb9b380e71f74b24e9c316f04b9c80d41ab5dfa1a1f1024b913a4570567c11e9e3093e50c80312cacd3a2bfbd351f8a99266adc5360ec85378704ecd7bda0be1222165995b28e2f5cbfb7ff51f0ff0bdcad80190f51c42688b8bebc9b88ce02f06ff3601ee999c3cc1262d1766273626fdf4b980bb002b3ba0bb686b1b53c4305a5a962468b9e21f3642a2ff8a65a326c4da2f7b63bd94817a23681ac44ebeab7025f512833156673ec80c19dafce1efe9cf4815296bec86acbb2254d92c483438bca056d45b9a579292a28953f9edf24a3c8ee055bdb85e44dafe4c76c42f92d88f4e606361a8dad037aef2601a113cd2b1afd6235baa8ceca925343a6f0088d496eee4f6e2070aa79e2453c0c34110dd7240baabb9aa97fdbcba569067cf97fc4e5f09727c12f131763f9463d74667ede822c6db9afeef326a712ec41514644e1299b98b0e95d044a94cd260f987b4d238d5d7670995ad67268c01bc31498308d23171c1d2341ac5a47c5516d1fe5038d3b20a14bb97ae41ed0a923f49d75e30593e014508aadf848749d98d6489b5e8354139e18627b09b83974ecb31995ab322224d5a11956571fb6e74162bfea936aff17b978a276b955498634d3a6e19465212a965f896c6db24f76102037a8525a7d9be5758b5da288556228cafbc74c9aae1a3c34d4d4b6120d1a057f95922fcf2d66f70bce5f4f321a2058ecabec6072220ed15c94b818ec4121845fb8171cfd9434b20c5ac319fdc7f8da3bdf4eab078a7c2494597264f2f6700e6570e528ff160a7f8ec07814dfcaec182e29699ed132cfbe9eb0825b6bf4041181816852837169b2bb7d61f67ba945924e0d3524f0a4646ceb32e7e707e16d89d3c066339e774d262c31ec6540b15d2d227bbe25977237b0e278565e86ce8dde438f36ac4dd1f75100e5c2350d354c5b39946acd64dce9d62c47cf2ab1b78b75dbbee6333b5b2176a9c7a21f15dc42701f65b05a86cb1df1533c7e991c26bff8b84606c0dffd2cda991343682438f12b4c634d4dfbccc41773a78eb1dca85e08830d5804ef926456157cec86ec93b95ee16a4ca47f10459a0c72424bd003b7c026fb9a7964f374a580250f73cb119eb458e30b92d703018a7bb1c3ec44166d28791b03e273e58fc8002a4dc004e7cddc415e9e7e2de52c308a1c7d8b8fcef0fdb931e684a9de94f579477f5cfdcf37bb119a0eb1c171b0c7e33c27ebe8c0e551c66f1b1c590c5f200794b2b3b2bd4a73f6dd402b299f0e74f75b54f3c939f78aa188fa8ca7c3eff150d17b8d0599bacf3f99d417c5e97aa83a6dea0cd9ca5b4be3b4d18e4ab2436a6f771e318381c34e9a63ff636642773ea9fb640c66db3daf8004794d95b77c59bace109d69c55aa4963e291c54c0118d65470b9becc1c1d763e7c1c0a21f6adc89eea136fb5195011218b89a270478056f7bc40c3dc3e52c1edbfda7a396d9be4c833b978556488b6708800faa9f99d42eec82b1b33121befbf135561"}}]}}}}]}, 0x930}}, 0x0) 14:29:30 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) [ 263.914916][ T9299] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 264.202635][ T9299] usb 5-1: string descriptor 0 read error: -22 [ 264.212900][ T9299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.225737][ T9299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.253148][T10286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 264.273760][ T9299] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 264.477319][ T9299] usb 5-1: USB disconnect, device number 4 [ 265.252618][ T9299] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 265.626160][ T9299] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 265.903378][ T9299] usb 5-1: string descriptor 0 read error: -22 [ 265.911907][ T9299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.925599][ T9299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.963439][T10286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 265.984734][ T9299] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 266.193182][ T9463] usb 5-1: USB disconnect, device number 5 14:29:33 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0, 0x28}}, 0x0) 14:29:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x100) 14:29:33 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) 14:29:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) 14:29:33 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:29:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x24}}, 0x0) 14:29:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "6c4cce3aa8f77ed4978a42da002f651830902b9553c6855d5efcc4e8ffa1b17278ff7a49d66fa666853228639c4b62c37c04217faebcc74cae19035c3c12eb47"}) 14:29:33 executing program 1: io_uring_setup(0x2361, &(0x7f0000000040)={0x0, 0x0, 0x4}) 14:29:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000080)=@framed={{}, [@func, @jmp, @map_val, @map_val, @initr0, @btf_id]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 266.692775][ T9463] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 267.073294][ T9463] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 267.372904][ T9463] usb 5-1: string descriptor 0 read error: -22 [ 267.380546][ T9463] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.397691][ T9463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.443246][T10346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 267.478557][ T9463] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 267.690830][ T3324] usb 5-1: USB disconnect, device number 6 14:29:35 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x930, r1, 0x1, 0x0, 0x0, {{}, {@val={0x4, 0xb}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "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"}}]}}}}]}, 0x930}}, 0x0) 14:29:35 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000001040)={0x0}}, 0x0) 14:29:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 268.229489][T10383] netlink: 2328 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.252005][T10387] netlink: 2328 bytes leftover after parsing attributes in process `syz-executor.1'. 14:29:35 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x6501c0) 14:29:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x40049409, 0x0) 14:29:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00', r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) 14:29:35 executing program 2: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x80002060) [ 268.383396][T10398] nbd: must specify at least one socket [ 268.562574][ T9423] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 268.953256][ T9423] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 269.212942][ T9423] usb 5-1: string descriptor 0 read error: -22 [ 269.221047][ T9423] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.244726][ T9423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.272842][T10389] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 269.294280][ T9423] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 269.504165][ T9423] usb 5-1: USB disconnect, device number 7 14:29:36 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1260, 0x0) 14:29:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {@val={0x14}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "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"}}]}}}}]}, 0x930}}, 0x0) 14:29:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4008ae06, 0x0) 14:29:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae04, 0x0) 14:29:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x401870cc, 0x0) 14:29:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) 14:29:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0) [ 270.364465][ T9423] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 270.752852][ T9423] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 271.072765][ T9423] usb 5-1: string descriptor 0 read error: -22 [ 271.080425][ T9423] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.091599][ T9423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.133133][T10428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 271.154865][ T9423] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 271.372804][ T38] usb 5-1: USB disconnect, device number 8 14:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:29:38 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:38 executing program 2: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000006c0)=[{}], 0x1, 0x200) 14:29:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x930}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "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"}}]}}}}]}, 0x930}}, 0x0) 14:29:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}}, 0x0) 14:29:38 executing program 3: r0 = socket(0xa, 0x6, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 14:29:38 executing program 1: r0 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='R', 0x1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='R', 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, 0x0, 0x0) 14:29:39 executing program 1: syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x8, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, "b3"}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x5, 'L}N'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd1, 0x0, 0x1, 0x0, "", "06"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xafe9}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "76377397285658a3fe0067c97cf0ed64"}]}}) [ 272.253063][ T9463] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 272.372582][ T9428] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 272.512612][ T9463] usb 5-1: Using ep0 maxpacket: 8 [ 272.632685][ T9428] usb 6-1: Using ep0 maxpacket: 8 [ 272.639935][ T9463] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 272.842804][ T9428] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.855564][ T9428] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.871209][ T9428] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 272.887043][ T9428] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.912897][ T9463] usb 5-1: string descriptor 0 read error: -22 [ 272.921018][ T9463] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.932473][ T9463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.989215][ T9463] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 273.073063][ T9428] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.086973][ T9428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.097981][ T9428] usb 6-1: Product: syz [ 273.103897][ T9428] usb 6-1: Manufacturer: syz [ 273.112043][ T9428] usb 6-1: SerialNumber: syz [ 273.186300][ T7] usb 5-1: USB disconnect, device number 9 [ 273.472861][ T9428] usb 6-1: 0:2 : does not exist [ 273.488128][ T9428] usb 6-1: USB disconnect, device number 6 14:29:40 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:40 executing program 3: r0 = socket(0xa, 0x6, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 14:29:40 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002500)='/dev/autofs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x10000000) 14:29:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x541b, 0x0) 14:29:40 executing program 2: socket(0x25, 0x5, 0x80000000) 14:29:40 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025500010180100809"], 0x0) 14:29:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x5451, 0x0) [ 274.022700][ T9428] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 274.132637][ T38] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 274.282826][ T9428] usb 5-1: Using ep0 maxpacket: 8 [ 274.382740][ T7] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 274.382776][ T38] usb 6-1: Using ep0 maxpacket: 8 [ 274.424707][ T9428] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 274.584673][ T38] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.604087][ T38] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.615501][ T38] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 274.633532][ T38] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 274.665372][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 274.743836][ T9428] usb 5-1: string descriptor 0 read error: -22 [ 274.754218][ T9428] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.767185][ T9428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.792936][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.802894][ T38] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.809429][ T7] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 274.828622][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.829681][ T9428] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 274.861034][ T38] usb 6-1: Product: syz [ 274.867931][ T38] usb 6-1: Manufacturer: syz [ 274.881364][ T38] usb 6-1: SerialNumber: syz [ 274.993034][ T7] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.006013][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.016388][ T7] usb 8-1: Product: syz [ 275.023214][ T7] usb 8-1: Manufacturer: syz [ 275.029050][ T7] usb 8-1: SerialNumber: syz [ 275.031519][ T9428] usb 5-1: USB disconnect, device number 10 14:29:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {@val={0x10}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "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"}}]}}}}]}, 0x930}}, 0x0) [ 275.223084][ T38] usb 6-1: 0:2 : does not exist [ 275.255939][ T38] usb 6-1: USB disconnect, device number 7 [ 275.352593][ T7] usb 8-1: USB disconnect, device number 8 14:29:42 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:42 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025500010180100809040000030206004506240600009505"], 0x0) 14:29:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x80081272, 0x0) 14:29:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x40) 14:29:42 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48c1, 0x0) [ 275.822648][ T38] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 275.862931][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 276.062676][ T3324] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 276.072744][ T38] usb 7-1: Using ep0 maxpacket: 8 [ 276.123011][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 276.213579][ T38] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.225764][ T38] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.252979][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 276.312538][ T3324] usb 8-1: Using ep0 maxpacket: 8 [ 276.423475][ T38] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.440745][ T38] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.456237][ T38] usb 7-1: Product: syz [ 276.464630][ T38] usb 7-1: Manufacturer: syz [ 276.473588][ T3324] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.492210][ T38] usb 7-1: SerialNumber: syz [ 276.502945][ T3324] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 276.543375][ T7] usb 5-1: string descriptor 0 read error: -22 [ 276.550380][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.576353][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.634981][ T7] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 276.672777][ T3324] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.692842][ T3324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.706902][ T3324] usb 8-1: Product: syz [ 276.714705][ T3324] usb 8-1: Manufacturer: syz [ 276.720084][ T3324] usb 8-1: SerialNumber: syz [ 276.833899][ T38] cdc_ether 7-1:1.0: skipping garbage [ 276.836430][ T9423] usb 5-1: USB disconnect, device number 11 [ 276.845784][ T38] usb 7-1: bad CDC descriptors [ 276.871413][ T38] usb 7-1: USB disconnect, device number 9 14:29:43 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 14:29:43 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000001040)={&(0x7f0000000040)="ef", 0x1}}, 0x0) [ 277.004560][ T3324] usb 8-1: USB disconnect, device number 9 14:29:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r0) 14:29:44 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 277.532563][ T3324] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 277.802626][ T3324] usb 7-1: Using ep0 maxpacket: 8 [ 277.939092][ T3324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.957970][ T3324] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.113163][ T3324] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.129606][ T3324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.153329][ T3324] usb 7-1: Product: syz [ 278.160773][ T3324] usb 7-1: Manufacturer: syz [ 278.167621][ T3324] usb 7-1: SerialNumber: syz 14:29:45 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random="76e87adba810", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "e7f108", 0x10, 0x2c, 0x0, @private0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "cd93d6", 0x0, '!=\x00'}}}}}}}, 0x0) 14:29:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)={0x930, r1, 0x1, 0x0, 0x0, {{}, {@val={0x2}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x905, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast, @random="de4c45bdd922"}}, @measure_req={0x0, 0x0, {0x0, [{0x26, 0x44, {0x0, 0x0, 0x0, "ccd832f1ce3ac06b3d92540898579c9a7a09b35f261185d33f60ed46f030a4be267f0cf50c7706b153e22c576f1b87aa7a011b5f9a5fdf5330c2e22875420ab92f"}}, {0x26, 0x89a, {0x0, 0x0, 0x0, "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"}}]}}}}]}, 0x930}}, 0x0) 14:29:45 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:45 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 278.449190][T10671] netlink: 2332 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.468517][T10676] netlink: 2332 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.493271][ T3324] cdc_ether 7-1:1.0: skipping garbage 14:29:45 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1411, 0x4}, 0x10}}, 0x0) [ 278.503817][ T3324] usb 7-1: bad CDC descriptors [ 278.516759][ T3324] usb 7-1: USB disconnect, device number 10 14:29:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f00000002c0)={&(0x7f00000014c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x14, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 14:29:45 executing program 3: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 278.621148][T10689] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 278.641178][T10693] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x17, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 278.712680][ T38] usb 6-1: new low-speed USB device number 8 using dummy_hcd 14:29:45 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/55, 0x37}}, 0x120) [ 278.782099][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.794130][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.815772][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.833199][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.863436][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.887852][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.908904][ T9521] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 278.922325][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.934060][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.944295][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.955016][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.965541][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 14:29:45 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 278.976325][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.990082][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 278.999536][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.010599][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.022743][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.033988][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.046443][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.057066][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.070148][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.080020][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.082846][ T38] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 279.089161][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.111865][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.120449][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.126996][ T38] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 279.131723][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.156090][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.165830][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.172920][ T38] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 279.175556][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.200972][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.211700][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.227144][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.239765][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.251089][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.260775][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.270251][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.278835][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.287559][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.302143][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.310996][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.320956][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.331257][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.347191][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.356934][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.370564][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.380695][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 279.392672][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.402271][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.412789][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.426278][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.436436][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 279.442786][ T38] usb 6-1: string descriptor 0 read error: -22 [ 279.450998][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.466362][ T38] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.470821][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 279.481651][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.493818][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.514252][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.523131][T10673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 279.525578][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.534526][T10673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 279.545027][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.554100][T10673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 279.562836][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.582817][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.593197][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.603471][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.603851][ T38] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 279.613430][ T9423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.636360][ T9423] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 279.762629][ T9521] usb 8-1: string descriptor 0 read error: -22 [ 279.776464][ T9521] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.817637][ T9521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.828625][ T9463] usb 6-1: USB disconnect, device number 8 [ 279.873587][ T9521] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 280.076849][ T9521] usb 8-1: USB disconnect, device number 10 [ 280.622726][ T9521] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 280.862867][ T20] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 281.012866][ T9521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 281.035995][ T9521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 281.051633][ T9521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 281.263383][ T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.276974][ T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.291901][ T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 281.308304][ T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.312719][ T9521] usb 6-1: string descriptor 0 read error: -22 [ 281.323298][ T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 281.335432][ T9521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.350045][ T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.379123][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.414108][T10673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 281.427937][T10673] raw-gadget gadget: fail, usb_ep_enable returned -22 14:29:48 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:48 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:48 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/55, 0x37}}, 0x120) [ 281.472781][ T9521] usb 6-1: can't set config #1, error -71 [ 281.504723][ T9521] usb 6-1: USB disconnect, device number 9 [ 281.506908][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.529869][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.549043][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.572056][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.591295][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.609383][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.625140][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 14:29:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) [ 281.647608][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.652733][ T20] usb 8-1: string descriptor 0 read error: -71 [ 281.668840][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.670905][ T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.690633][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.697107][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.708701][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.730816][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.732751][ T20] usb 8-1: can't set config #1, error -71 [ 281.743518][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.752239][ T20] usb 8-1: USB disconnect, device number 11 [ 281.762190][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.771502][ T9463] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 281.783300][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.806938][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.819284][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.830103][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.841204][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 14:29:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r2, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) [ 281.855494][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.866991][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.880901][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.891357][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.904934][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.915315][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.924426][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.934988][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.944793][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 14:29:48 executing program 3: socketpair(0x2, 0x5, 0x1, &(0x7f0000000000)) [ 281.955858][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.962590][ T9521] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 281.965187][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.984478][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.996214][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.006893][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.017274][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.029012][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.031589][ T9463] usb 5-1: device descriptor read/64, error 18 [ 282.039927][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.059125][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.070207][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.080778][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.091673][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.101411][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.113850][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.124562][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.136452][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.149064][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.160706][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 14:29:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) [ 282.177615][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.189044][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.199991][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.210649][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.221285][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.232877][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 14:29:49 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x1) [ 282.242793][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.251661][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.261183][ T9484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.271081][ T9484] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 282.353186][ T9463] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 282.353255][ T9521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 282.399811][ T9521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 282.419465][ T9521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 282.602646][ T9463] usb 5-1: device descriptor read/64, error 18 [ 282.696901][ T9521] usb 6-1: string descriptor 0 read error: -22 [ 282.709590][ T9521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.726148][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.733587][ T9463] usb usb5-port1: attempt power cycle [ 282.753560][T10760] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 282.764753][T10760] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 282.776857][T10760] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 282.803553][ T9521] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 283.026477][ T3315] usb 6-1: USB disconnect, device number 10 [ 283.452567][ T9463] usb 5-1: new low-speed USB device number 14 using dummy_hcd 14:29:50 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 283.562998][ T9463] usb 5-1: Invalid ep0 maxpacket: 0 [ 283.727520][ T9463] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 283.853048][ T9463] usb 5-1: Invalid ep0 maxpacket: 0 [ 283.861682][ T9463] usb usb5-port1: unable to enumerate USB device [ 283.872865][ T20] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 284.284346][ T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 284.305045][ T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 284.323082][ T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt 14:29:51 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:51 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/55, 0x37}}, 0x120) 14:29:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x3, r0, 0x0) [ 284.511831][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.530785][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 14:29:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 284.542035][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.555322][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.566772][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.578889][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.591040][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.602005][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.613400][ T20] usb 6-1: string descriptor 0 read error: -22 [ 284.623059][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.636349][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.647453][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.658770][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.673755][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.687702][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.698342][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 14:29:51 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x3) [ 284.709672][T10813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 284.720739][T10813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 284.731206][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.741883][T10813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 284.752825][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 14:29:51 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x42002) write$khugepaged_scan(r0, &(0x7f0000000040)='1000000\x00', 0x8) [ 284.770401][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.790271][ T20] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 284.799927][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 14:29:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x0, 0x2}, 0x0, 0x0, r0) [ 284.824047][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.843151][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.861628][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.880107][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.897742][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.915799][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.934307][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.951743][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.962752][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.972928][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 284.984429][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.010596][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.027500][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.039135][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.050409][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.062292][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.072066][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.083158][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.093389][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.104727][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.116772][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.129023][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.141749][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.152433][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.163399][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.174780][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.186039][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.199182][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.212507][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.223176][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.236003][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.246442][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.256862][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.267526][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.278305][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.288685][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.299690][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.310832][ T9428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 285.323936][ T9428] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 285.341463][ T9463] usb 6-1: USB disconnect, device number 11 14:29:52 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 285.722616][ T20] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 285.942725][ T9463] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 285.953209][ T20] usb 5-1: device descriptor read/64, error 18 [ 286.243699][ T20] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 286.322884][ T9463] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 286.336065][ T9463] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 286.354053][ T9463] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 286.442650][ T20] usb 5-1: device descriptor read/64, error 18 [ 286.563016][ T20] usb usb5-port1: attempt power cycle [ 286.602930][ T9463] usb 6-1: string descriptor 0 read error: -22 [ 286.610845][ T9463] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.623691][ T9463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.652995][T10865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 286.664398][T10865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 286.673124][T10865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 286.693450][ T9463] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 286.903389][ T7] usb 6-1: USB disconnect, device number 12 [ 287.224649][ T3408] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.234583][ T3408] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.272664][ T20] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 287.363829][ T20] usb 5-1: Invalid ep0 maxpacket: 0 [ 287.522563][ T20] usb 5-1: new low-speed USB device number 19 using dummy_hcd 14:29:54 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:54 executing program 3: prctl$PR_SET_MM(0xf, 0x405400, &(0x7f0000ffc000/0x3000)=nil) 14:29:54 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/55, 0x37}}, 0x120) 14:29:54 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 287.671068][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.682582][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.703129][ T20] usb 5-1: device descriptor read/8, error -71 [ 287.709304][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 14:29:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r0) [ 287.724025][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.735794][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.758165][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.769867][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 14:29:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',default_permis', @ANYBLOB=',Zi', @ANYRESDEC=0xee01, @ANYBLOB="ac610100000000000000fb1ff6cf2b7261"]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 287.797696][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.818038][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.830176][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.831594][ C2] hrtimer: interrupt took 37955 ns [ 287.842787][ T20] usb usb5-port1: unable to enumerate USB device [ 287.846894][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.846934][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.846968][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.846994][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847023][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847052][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847080][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847116][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847139][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847172][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847223][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847248][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847275][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847305][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847337][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847363][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847387][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847421][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847448][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847479][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847508][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847547][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847613][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847637][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847670][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847697][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847739][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847766][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847795][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847827][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.847853][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.849497][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 287.942583][ T9463] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 287.946973][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.212604][ T9463] usb 6-1: Using ep0 maxpacket: 8 [ 288.217546][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.223092][ T20] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 288.247241][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.260714][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.272997][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.285329][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.296418][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.310771][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.323541][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.335821][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.347850][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.359793][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.371518][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.384634][ T7] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 288.398046][ T9463] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 155, changing to 11 [ 288.420918][ T9463] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 288.434883][ T20] usb 5-1: device descriptor read/64, error 18 14:29:55 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) [ 288.456910][ T9463] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 288.802719][ T9463] usb 6-1: string descriptor 0 read error: -22 [ 288.811433][ T20] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 288.822170][ T9463] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.836939][ T9463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.873327][T10890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 288.891322][T10890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 289.049332][ T20] usb 5-1: device descriptor read/64, error 18 [ 289.112790][ T9463] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 289.130585][ T9463] usb 6-1: USB disconnect, device number 13 [ 289.172709][ T20] usb usb5-port1: attempt power cycle 14:29:56 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 289.893886][ T20] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 290.023248][ T20] usb 5-1: Invalid ep0 maxpacket: 0 [ 290.185339][ T20] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 290.388685][ T20] usb 5-1: Invalid ep0 maxpacket: 0 [ 290.397260][ T20] usb usb5-port1: unable to enumerate USB device [ 290.612568][ T3324] usb 6-1: new high-speed USB device number 14 using dummy_hcd 14:29:57 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) 14:29:57 executing program 2: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) [ 290.872952][ T3324] usb 6-1: Using ep0 maxpacket: 8 [ 291.025750][ T3324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 155, changing to 11 14:29:58 executing program 2: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) [ 291.072560][ T3324] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 291.098181][ T3324] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 14:29:58 executing program 2: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) [ 291.302593][ T20] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 291.373088][ T3324] usb 6-1: string descriptor 0 read error: -22 [ 291.386978][ T3324] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.408249][ T3324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.443123][T10939] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 291.456187][T10939] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 291.733357][ T3324] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 291.748740][ T3324] usb 6-1: USB disconnect, device number 14 [ 291.764502][ T20] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 292.262668][ T20] usb 5-1: string descriptor 0 read error: -22 [ 292.280419][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.297107][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.364087][ T20] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 292.569215][ T20] usb 5-1: USB disconnect, device number 24 14:30:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',default_permis', @ANYBLOB=',Zi', @ANYRESDEC=0xee01, @ANYBLOB="ac610100000000000000fb1ff6cf2b7261"]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:30:02 executing program 2: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) 14:30:02 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:02 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001280)={0xffffffffffffffff, 0x0, &(0x7f0000001240)={0x0}}, 0x0) [ 296.202674][ T3324] usb 6-1: new high-speed USB device number 15 using dummy_hcd 14:30:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',default_permis', @ANYBLOB=',Zi', @ANYRESDEC=0xee01, @ANYBLOB="ac610100000000000000fb1ff6cf2b7261"]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:30:03 executing program 2: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa8f911aec3cb6ab3) [ 296.232629][ T9521] usb 5-1: new low-speed USB device number 25 using dummy_hcd 14:30:03 executing program 2: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=.']) 14:30:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d90000000f0000000100000000000000000000000020000000200000200000002cc4645f2cc4645f0100ffff53ef0100010000002cc4645f000000000000000001000000000000000b0000008000000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3338363633343038350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000d9ca5cac99fd4329af4dde786c1a5d13010040000c000000000000002cc4645f", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a", 0x20, 0x7e0}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=0x0, @ANYBLOB=',norecovery,inode_readahead_blks=0x00000000020001']) [ 296.477192][T11017] loop2: detected capacity change from 0 to 7 [ 296.521552][T11017] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 296.545946][ T3324] usb 6-1: Using ep0 maxpacket: 8 [ 296.644490][T11017] loop2: detected capacity change from 0 to 7 [ 296.693411][ T9521] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 296.764191][ T3324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 155, changing to 11 [ 296.781663][ T3324] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 296.796460][ T3324] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 14:30:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a", 0x20, 0x7e0}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=0x0, @ANYBLOB=',norecovery,inode_readahead_blks=0x00000000020001']) [ 297.012996][ T9521] usb 5-1: string descriptor 0 read error: -22 [ 297.026416][ T9521] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.058690][ T9521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.064042][ T3324] usb 6-1: string descriptor 0 read error: -22 [ 297.098456][ T3324] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.119945][ T3324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.152098][ T9521] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 297.163690][T10991] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 297.163819][T10991] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 297.354009][ T9521] usb 5-1: USB disconnect, device number 25 [ 297.403275][ T3324] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 297.419387][ T3324] usb 6-1: USB disconnect, device number 15 14:30:04 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a", 0x20, 0x7e0}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=0x0, @ANYBLOB=',norecovery,inode_readahead_blks=0x00000000020001']) 14:30:04 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 297.975939][T11052] loop2: detected capacity change from 0 to 7 [ 297.996828][T11052] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 14:30:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',default_permis', @ANYBLOB=',Zi', @ANYRESDEC=0xee01, @ANYBLOB="ac610100000000000000fb1ff6cf2b7261"]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:30:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a", 0x20, 0x7e0}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=0x0, @ANYBLOB=',norecovery,inode_readahead_blks=0x00000000020001']) [ 299.445128][T11067] loop2: detected capacity change from 0 to 7 [ 299.466582][T11067] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 299.582651][ T3315] usb 5-1: new low-speed USB device number 26 using dummy_hcd 14:30:06 executing program 2: timer_create(0x700, 0x0, 0x0) 14:30:06 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000000)) timer_gettime(0x0, 0xffffffffffffffff) 14:30:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:30:06 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 299.963877][ T3315] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 300.223951][ T3315] usb 5-1: string descriptor 0 read error: -22 [ 300.233980][ T3315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.249216][ T3315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.309919][ T3315] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 300.515898][ T20] usb 5-1: USB disconnect, device number 26 14:30:08 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xfffffe5e, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x9c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_BYTES={0xc}]}]}, 0xb8}}, 0x0) 14:30:08 executing program 2: clock_gettime(0x6, &(0x7f00000013c0)) 14:30:08 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:08 executing program 3: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:30:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, 0xffffffffffffffff, 0x0) 14:30:08 executing program 2: lstat(&(0x7f0000006380)='.\x00', &(0x7f00000063c0)) 14:30:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=ANY=[], 0x12d0}}], 0x1, 0x0) [ 301.412614][ T9423] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 301.823078][ T9423] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 302.113232][ T9423] usb 5-1: string descriptor 0 read error: -22 [ 302.121495][ T9423] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.143329][ T9423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.215004][ T9423] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 302.418587][ T3916] usb 5-1: USB disconnect, device number 27 14:30:09 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f00000030c0)=[{{&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x20, 0x0, 0x0, "08abefd1f491da064d"}, {0x1010, 0x0, 0x0, "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"}, {0xc8, 0x0, 0x0, "a05c520ba9d4104ba862d1840ad2d22256e79b0e8f020bda3f72c9d06bc1832e4606d95c6aa4eedb4968d54f1145b188fcb3efc26854990f738869cbd2ae6f6eff5ee6147b2301ebc8b055aa8ffba35bbbdc24b319f6263bea1e9f6379e73397d235e4dec9836f51ebbcac4d1cb4a54cee8b029b16fe6af7c8a7ed819a3df0f638192be4141c5fb946b2ecd6493b8b0d954f09be65bccf96376c3b39d0a6a45223c03c7039f77e4fc363edec22ef26668f"}, {0x70, 0x0, 0x0, "079af4b3eebd04c3c4fcce9ee3a1b35aea9918499a73df7b47d86063df29c82477576b35ed234b61e56a715df4d3b42741fc97e2244569b741492b2cf140ddcb664d33bfdc2dc09df03e4e3cba2a4685ea6b2b7b71c4e6430b"}, {0x88, 0x0, 0x0, "3971544f820b18ea480bebda90d78d04b5a0d308e738ab70fb1f6fe0b73f68b1e948c666e6f75c427a64dedbd9395500dde51766622eaf380af15dc6d50fb5023c983e810c570b40ada775f3e030e3b6979e4fd9fc805883f0fc919700b4f7f5472de82ab89cd4f2f7dc2655a5d95be662"}, {0xc8, 0x0, 0x0, "ce92b484cd98137b526ba4ea8c8048051443110438b039d9e09deceb7ed2771cccf4d693b1296504cdfd5c987240cad76e1af710006e7c9463a0929daaff33f09bfeef4aa0bd950e02e9d00d91c8919461d81b26a7bcd8b52c817503ad9f822c3bd4a50e39a1eaeb6d8a98f8ad504711a102b8525406f271858ae68b1dca9b1712aebcd46581540a591c5e76de6815890e2337f3eb81ca668a9bd5113d1f3c54d571bc41886031cb23befa94d4d51ff669"}, {0x98, 0x0, 0x0, "0db3ec25e1b8d262f0ea38848596d419815fd1b04f27cb0d0400053a9d11190a1119e2bb794c8ce7b0948a857d0c72b265e6301027805e12ff969a269b33d90b584a5690a20b3b0d18bdce317774d446b3425f949eed3117fdb5cbab4e874f82b310f09af1d0ef5f20ec5585c76c9f87017d3d6ee574e2572def1a5b3ce62840ad"}, {0xcb8, 0x0, 0x0, "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"}], 0x2008}}], 0x1, 0x0) 14:30:09 executing program 3: prctl$PR_SET_MM(0xf, 0x7ffffffff000, &(0x7f0000ffc000/0x3000)=nil) 14:30:09 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=ANY=[], 0xf}}], 0x1, 0x0) 14:30:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[{0x10}], 0x10}}, {{&(0x7f0000001580)=@can, 0x80, 0x0}}], 0x2, 0x0) 14:30:10 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000040)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 303.225360][T11166] ptrace attach of "/syz-executor.3"[11165] was attempted by "/syz-executor.3"[11166] [ 303.242678][ T9484] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 303.263313][ T3315] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 303.442620][ T9484] usb 6-1: device descriptor read/64, error 18 [ 303.643046][ T3315] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 303.723710][ T9484] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 303.932815][ T9484] usb 6-1: device descriptor read/64, error 18 [ 303.935217][ T3315] usb 5-1: string descriptor 0 read error: -22 [ 303.953069][ T3315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.968010][ T3315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.034454][ T3315] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 304.073721][ T9484] usb usb6-port1: attempt power cycle [ 304.238041][ T9299] usb 5-1: USB disconnect, device number 28 14:30:11 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) 14:30:11 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:11 executing program 3: r0 = getpgid(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x23, 0x4, @tid=r0}, &(0x7f0000000180)) [ 304.805466][ T9484] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 304.912763][ T9484] usb 6-1: Invalid ep0 maxpacket: 0 [ 305.062807][ T9484] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 305.112531][ T9463] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 305.162935][ T9484] usb 6-1: Invalid ep0 maxpacket: 0 [ 305.170946][ T9484] usb usb6-port1: unable to enumerate USB device [ 305.482706][ T9463] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 305.742698][ T9463] usb 5-1: string descriptor 0 read error: -22 [ 305.751155][ T9463] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.763367][ T9463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.818441][ T9463] cdc_ether: probe of 5-1:1.0 failed with error -22 14:30:12 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000001031b"], 0x1c}}, 0x0) 14:30:12 executing program 2: add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0xfffff, 0xfffffffffffffff8) [ 306.009068][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.019340][ T9463] usb 5-1: USB disconnect, device number 29 14:30:12 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000540)={0x0, "13a04baf140dfe98a9d112782c901cd21dcbf6368453b9f0afe77e303b75729749792eadf8ca4a58d26bb396ad14dc549161abc21c96cb647e707d352029b209"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x11, r0, 0x0, 0x0) 14:30:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000001031b"], 0x1c}}, 0x0) 14:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000001041b"], 0x1c}}, 0x0) [ 306.117179][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.139410][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.482519][ T9299] usb 6-1: new low-speed USB device number 20 using dummy_hcd 14:30:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000001031b"], 0x1c}}, 0x0) 14:30:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x401}, 0x14}}, 0x0) [ 306.554550][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.712600][ T9299] usb 6-1: device descriptor read/64, error 18 [ 306.992624][ T9299] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 307.193624][ T9299] usb 6-1: device descriptor read/64, error 18 [ 307.327778][ T9299] usb usb6-port1: attempt power cycle [ 308.052919][ T9299] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 308.142947][ T9299] usb 6-1: Invalid ep0 maxpacket: 0 [ 308.303701][ T9299] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 308.424883][ T9299] usb 6-1: Invalid ep0 maxpacket: 0 [ 308.433040][ T9299] usb usb6-port1: unable to enumerate USB device 14:30:16 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:16 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, 0x0) 14:30:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0xb374c82f22066e56, 0x0) 14:30:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000001031b"], 0x1c}}, 0x0) [ 309.103751][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:30:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000002010101000000000000000000000000080002"], 0x2c}}, 0x0) [ 309.146588][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 14:30:16 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0010102, 0x0) [ 309.157389][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:30:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) chmod(&(0x7f0000000640)='./file0\x00', 0x0) 14:30:16 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) close(r0) [ 309.362641][T10855] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 309.542801][ T9299] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 309.734301][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 309.752696][ T9299] usb 6-1: device descriptor read/64, error 18 [ 310.022620][ T9299] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 310.232627][ T9299] usb 6-1: device descriptor read/64, error 18 [ 310.353403][ T9299] usb usb6-port1: attempt power cycle [ 311.072634][ T9299] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 311.174049][ T9299] usb 6-1: Invalid ep0 maxpacket: 0 [ 311.322764][ T9299] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 311.424008][ T9299] usb 6-1: Invalid ep0 maxpacket: 0 [ 311.431253][ T9299] usb usb6-port1: unable to enumerate USB device 14:30:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:30:19 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:19 executing program 3: add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 14:30:19 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, 0x0) 14:30:19 executing program 3: prctl$PR_SET_MM(0x10, 0x550000, &(0x7f0000ffc000/0x3000)=nil) 14:30:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{0xfffffffffffffffe}], 0x1}}], 0x1, 0x0) [ 312.212796][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.238741][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:30:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0xfffffdea}}, 0x48050) 14:30:19 executing program 3: shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) 14:30:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4) [ 312.292971][T10855] usb 5-1: can't set config #1, error -71 [ 312.303994][T10855] usb 5-1: USB disconnect, device number 30 [ 312.592527][ T9423] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 312.692601][T10855] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 313.042962][ T9423] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 313.082761][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 313.302692][ T9423] usb 6-1: string descriptor 0 read error: -22 [ 313.313121][ T9423] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.325298][ T9423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.353959][T11286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.366905][T11286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.378873][T11286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.394051][ T9423] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 313.611717][ T20] usb 6-1: USB disconnect, device number 28 14:30:21 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:21 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) [ 314.442613][ T20] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 314.813161][ T20] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 315.083528][ T20] usb 6-1: string descriptor 0 read error: -22 [ 315.091735][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.106281][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.133515][T11332] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 315.144951][T11332] raw-gadget gadget: fail, usb_ep_enable returned -22 14:30:22 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, 0x0) 14:30:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff2a) 14:30:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) [ 315.173769][ T20] cdc_ether: probe of 6-1:1.0 failed with error -22 14:30:22 executing program 2: add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 14:30:22 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) [ 315.282583][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 14:30:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 315.296809][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.322867][T10855] usb 5-1: can't set config #1, error -71 [ 315.350538][T10855] usb 5-1: USB disconnect, device number 31 [ 315.393656][ T9521] usb 6-1: USB disconnect, device number 29 [ 315.734094][T10855] usb 5-1: new low-speed USB device number 32 using dummy_hcd 14:30:22 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:22 executing program 2: keyctl$KEYCTL_RESTRICT_KEYRING(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', 0x0) [ 316.133847][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 316.232619][ T9463] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 316.612951][ T9463] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 316.903782][ T9463] usb 6-1: string descriptor 0 read error: -22 [ 316.911782][ T9463] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.927180][ T9463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.993087][T11377] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 317.003734][T11377] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 317.023935][ T9463] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 317.239463][ T9463] usb 6-1: USB disconnect, device number 30 14:30:25 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 14:30:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 14:30:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003010101"], 0x1c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:30:25 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 318.288416][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:30:25 executing program 2: mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x90130, 0xffffffffffffffff, 0x0) [ 318.332238][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.362706][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 14:30:25 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) [ 318.384454][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.412627][T10855] usb 5-1: can't set config #1, error -71 14:30:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003020101"], 0x2c}}, 0x0) [ 318.433428][T10855] usb 5-1: USB disconnect, device number 32 14:30:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) [ 318.456072][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.572921][ T9597] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 318.839430][T10855] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 319.002685][ T9597] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 319.243300][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 319.263014][ T9597] usb 6-1: string descriptor 0 read error: -22 [ 319.271436][ T9597] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.286795][ T9597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.324478][T11405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 319.337934][T11405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 319.354427][ T9597] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 319.522856][T10855] usb 5-1: string descriptor 0 read error: -22 [ 319.532261][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.542699][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.555168][ T3315] usb 6-1: USB disconnect, device number 31 [ 319.573234][T11409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 319.593771][T10855] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 319.803977][ T3315] usb 5-1: USB disconnect, device number 33 14:30:27 executing program 2: r0 = getpgid(0x0) waitid(0x2, r0, 0x0, 0xa0000002, 0x0) 14:30:27 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000540)={0x0, "13a04baf140dfe98a9d112782c901cd21dcbf6368453b9f0afe77e303b75729749792eadf8ca4a58d26bb396ad14dc549161abc21c96cb647e707d352029b209"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r0, 0x0, 0x0) 14:30:27 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:27 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="7916081427f65312f47b75446a75", 0xe}, {&(0x7f0000000080)="ac", 0x1}, {&(0x7f0000001080)="81", 0x1}], 0x3, &(0x7f0000001480)=[{0x10}], 0x10}}, {{&(0x7f0000001580)=@can, 0x80, 0x0}}], 0x2, 0x0) 14:30:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvmsg$can_raw(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r0) 14:30:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012121, 0x0) 14:30:27 executing program 2: clock_getres(0x4a39d5a08513d389, 0x0) 14:30:27 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000540)={0x0, "13a04baf140dfe98a9d112782c901cd21dcbf6368453b9f0afe77e303b75729749792eadf8ca4a58d26bb396ad14dc549161abc21c96cb647e707d352029b209"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0xf, r0, &(0x7f00000005c0)='user\x00', 0x0) 14:30:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x6800) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0xffffffffffffffff) [ 320.696497][ T9521] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 320.714935][ T9423] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 321.093147][ T9423] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 321.114196][ T9521] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 321.394703][ T9521] usb 6-1: string descriptor 0 read error: -22 [ 321.404026][ T9423] usb 5-1: string descriptor 0 read error: -22 [ 321.413841][ T9521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.427119][ T9423] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.438011][ T9423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.448093][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.493751][T11465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 321.493793][T11467] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 321.517894][T11465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 321.544829][ T9423] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 321.556669][ T9521] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 321.747908][ T3324] usb 6-1: USB disconnect, device number 32 [ 321.753101][T10855] usb 5-1: USB disconnect, device number 34 14:30:29 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r2, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 14:30:29 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:30:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000150a030000000000000000000000000008000340000000000900020073797a3204"], 0x34}}, 0x0) [ 322.285736][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:30:29 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00`'], 0x137) [ 322.593198][ T9597] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 323.003797][ T9597] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 14:30:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 14:30:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) 14:30:30 executing program 2: pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 323.303261][ T9597] usb 6-1: string descriptor 0 read error: -22 [ 323.315275][ T9597] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.331727][ T9597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.363296][T11522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 323.376931][T11522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 323.402771][T10855] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 323.414230][ T9597] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 323.650812][ T9521] usb 6-1: USB disconnect, device number 33 [ 323.843128][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 14:30:31 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9b}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:31 executing program 3: keyctl$unlink(0x5, 0x0, 0xffffffffffffffff) [ 324.473401][ T3315] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 324.847357][ T3315] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 325.162730][ T3315] usb 6-1: string descriptor 0 read error: -22 [ 325.171621][ T3315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.192150][ T3315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.222992][T11563] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 325.237067][T11563] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 325.260518][ T3315] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 325.457460][ T3324] usb 6-1: USB disconnect, device number 34 14:30:33 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:30:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x101}, 0x14}}, 0x0) 14:30:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0xffffffffffffffff) 14:30:33 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 14:30:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x300}, 0x0) 14:30:33 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x42002) write$khugepaged_scan(r0, 0x0, 0x0) [ 326.272747][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 14:30:33 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 326.294115][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.332656][T10855] usb 5-1: can't set config #1, error -71 [ 326.353592][T10855] usb 5-1: USB disconnect, device number 35 [ 326.484860][ T3324] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 326.753832][T10855] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 326.882817][ T3324] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 327.143419][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 327.188222][ T3324] usb 6-1: string descriptor 0 read error: -22 [ 327.213055][ T3324] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.228666][ T3324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.263007][T11590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.274002][T11590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.285501][T11590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.303536][ T3324] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 327.526539][ T9463] usb 6-1: USB disconnect, device number 35 14:30:36 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:30:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="b13661755ea8f72b9f227f9a005b2ce3f753d75da192885e2b54859763f1337a5ffae683", 0x24}], 0x1}}], 0x1, 0x0) 14:30:36 executing program 2: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:36 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x14}}], 0x14}}], 0x1, 0x0) 14:30:36 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4334, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x214}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 14:30:36 executing program 2: pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000280), &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x7e5]}, 0x8}) [ 329.362687][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.376927][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:30:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={0x0}}, 0x0) [ 329.426308][T10855] usb 5-1: can't set config #1, error -71 [ 329.436054][T10855] usb 5-1: USB disconnect, device number 36 [ 329.542529][ T7] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 329.822602][T10855] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 329.922724][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 330.192608][ T7] usb 6-1: string descriptor 0 read error: -22 [ 330.200686][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.216367][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.232751][T10855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 330.259652][T11641] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.268061][T11641] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.283810][ T7] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 330.490434][ T7] usb 6-1: USB disconnect, device number 36 14:30:39 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, 0x0) 14:30:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 14:30:39 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'netdevsim0\x00'}, 0x18) 14:30:39 executing program 3: bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 14:30:39 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000000c0)) 14:30:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'netdevsim0\x00'}, 0x18) 14:30:39 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0), 0x4) 14:30:39 executing program 2: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x7, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x13, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map, @generic={0x80, 0x3, 0x3, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000000d40)='GPL\x00', 0x869b, 0x0, 0x0, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x1}, 0x8, 0x10, 0x0}, 0x78) [ 332.432767][T10855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.457135][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:30:39 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) [ 332.483105][T10855] usb 5-1: can't set config #1, error -71 [ 332.490976][T10855] usb 5-1: USB disconnect, device number 37 [ 332.592782][ T9299] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 332.972919][ T9299] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 333.257136][ T9299] usb 6-1: string descriptor 0 read error: -22 [ 333.266481][ T9299] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.280828][ T9299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.313274][T11692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 333.334817][ T9299] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 333.538411][ T9299] usb 6-1: USB disconnect, device number 37 14:30:41 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:41 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:41 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:30:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000001540)) 14:30:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="feb74d19d2ca104c62175e7c8324ffe0", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000180)="11a8d0e969884978e8860815dd64c7", 0xf}], 0x1}}], 0x1, 0x0) 14:30:41 executing program 0: fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) 14:30:41 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 14:30:41 executing program 0: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) [ 334.412490][ T3324] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 334.812856][ T3324] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 335.083258][ T3324] usb 6-1: string descriptor 0 read error: -22 [ 335.092891][ T3324] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.109437][ T3324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.153662][T11740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 335.195515][ T3324] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 335.398864][ T9521] usb 6-1: USB disconnect, device number 38 14:30:42 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xaf, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14:30:42 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer\x00', 0x10001, 0x0) write$sequencer(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 14:30:42 executing program 2: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 14:30:42 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x46, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4}}, {0x0, 0x0}]}) 14:30:42 executing program 2: setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4}}, {0x0, 0x0}]}) 14:30:42 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) 14:30:43 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 336.097827][ T50] audit: type=1326 audit(1615732243.027:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11797 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa9549 code=0x0 [ 336.202660][ T9463] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 336.262727][ T9521] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 336.263117][ T9597] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 336.462533][ T9463] usb 8-1: Using ep0 maxpacket: 32 [ 336.542746][ T9597] usb 7-1: Using ep0 maxpacket: 32 [ 336.584612][ T9463] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.608584][ T9463] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.672699][ T9521] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 336.672998][ T9597] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.705288][ T9597] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.916765][ T50] audit: type=1326 audit(1615732243.857:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11797 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa9549 code=0x0 [ 336.943284][ T9521] usb 6-1: string descriptor 0 read error: -22 [ 336.960070][ T9521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.976703][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.003072][T11789] raw-gadget gadget: fail, usb_ep_enable returned -22 14:30:43 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x0, 0x0) [ 337.024014][ T9521] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 337.042999][ T9463] usb 8-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 337.058761][ T9463] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.068324][ T9463] usb 8-1: Product: syz [ 337.074037][ T9463] usb 8-1: SerialNumber: syz [ 337.113587][ T9597] usb 7-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 337.133155][ T9597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.149620][ T9597] usb 7-1: Product: syz [ 337.158000][ T9597] usb 7-1: SerialNumber: syz [ 337.236457][ T9521] usb 6-1: USB disconnect, device number 39 [ 337.402872][ T9463] usbhid 8-1:1.0: can't add hid device: -22 [ 337.410614][ T9463] usbhid: probe of 8-1:1.0 failed with error -22 [ 337.432926][ T9597] usbhid 7-1:1.0: can't add hid device: -22 [ 337.433958][ T9463] usb 8-1: USB disconnect, device number 12 [ 337.444686][ T9597] usbhid: probe of 7-1:1.0 failed with error -22 [ 337.461631][ T9597] usb 7-1: USB disconnect, device number 11 14:30:44 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 14:30:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)) 14:30:44 executing program 0: socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x800, 0x0) socket$inet6(0xa, 0x6, 0x0) [ 338.062619][ T3315] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 338.122704][ T9299] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 338.372873][ T9299] usb 8-1: Using ep0 maxpacket: 32 [ 338.463443][ T3315] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 338.492884][ T9299] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.507048][ T9299] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.873260][ T9299] usb 8-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 338.888641][ T9299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.904480][ T9299] usb 8-1: Product: syz [ 338.910130][ T9299] usb 8-1: SerialNumber: syz 14:30:45 executing program 0: syz_io_uring_setup(0x5185, &(0x7f0000000000)={0x0, 0xc4a7, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) 14:30:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0}}, 0x0) 14:30:45 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x535180) [ 338.962621][ T9299] usb 8-1: can't set config #1, error -71 [ 338.973357][ T9299] usb 8-1: USB disconnect, device number 13 14:30:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0, 0x1100}, {&(0x7f00000005c0)='[', 0x1}], 0x3, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20}, 0x0) 14:30:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000580)) 14:30:47 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 14:30:47 executing program 3: syz_io_uring_setup(0x4069, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) 14:30:47 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 14:30:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "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", "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"}) 14:30:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7804, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}) 14:30:47 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) 14:30:47 executing program 3: clock_gettime(0x0, &(0x7f0000002500)) 14:30:47 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) [ 340.943016][ T3315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.959954][ T3315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.002654][ T3315] usb 6-1: can't set config #1, error -71 [ 341.017903][ T3315] usb 6-1: USB disconnect, device number 40 [ 341.442560][ T3315] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 341.822916][ T3315] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 14:30:50 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 14:30:50 executing program 2: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 14:30:50 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 14:30:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000025c0)={'batadv_slave_1\x00'}) 14:30:50 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 14:30:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000300)) 14:30:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000003c0)) [ 344.032585][ T3315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.050254][ T3315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.082739][ T3315] usb 6-1: can't set config #1, error -71 [ 344.097304][ T3315] usb 6-1: USB disconnect, device number 41 14:30:51 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 344.472603][ T3315] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 344.502620][ T9428] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 344.757956][ T9428] usb 8-1: Using ep0 maxpacket: 32 [ 344.883092][ T3315] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 344.903287][ T9428] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.917466][ T9428] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.162829][ T9428] usb 8-1: string descriptor 0 read error: -22 [ 345.172111][ T9428] usb 8-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 345.187203][ T9428] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.246405][ T9428] usbhid 8-1:1.0: can't add hid device: -22 [ 345.255617][ T9428] usbhid: probe of 8-1:1.0 failed with error -22 [ 345.447278][ T9428] usb 8-1: USB disconnect, device number 14 [ 346.242759][ T9428] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 346.512796][ T9428] usb 8-1: Using ep0 maxpacket: 32 [ 346.632929][ T9428] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.657150][ T9428] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.922887][ T9428] usb 8-1: string descriptor 0 read error: -22 [ 346.930893][ T9428] usb 8-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 346.942761][ T9428] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:30:53 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 14:30:53 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sequencer2\x00', 0x0, 0x0) 14:30:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 346.994069][ T9428] usbhid 8-1:1.0: can't add hid device: -22 [ 347.001388][ T9428] usbhid: probe of 8-1:1.0 failed with error -22 14:30:53 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) 14:30:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000680)) 14:30:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 14:30:54 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) [ 347.092724][ T3315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.103893][ T3315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.142763][ T3315] usb 6-1: can't set config #1, error -71 [ 347.150973][ T3315] usb 6-1: USB disconnect, device number 42 [ 347.194886][ T9521] usb 8-1: USB disconnect, device number 15 14:30:54 executing program 3: syz_io_uring_setup(0x4069, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) io_uring_setup(0x5fe0, &(0x7f0000000100)) [ 347.513161][ T3315] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 347.942897][ T3315] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 348.242956][ T3315] usb 6-1: string descriptor 0 read error: -22 [ 348.251501][ T3315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.268791][ T3315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.313321][T11979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 348.325607][T11979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 348.344187][ T3315] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 348.550311][ T3315] usb 6-1: USB disconnect, device number 43 [ 348.664027][ T3408] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.673208][ T3408] ieee802154 phy1 wpan1: encryption failed: -22 14:30:56 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:30:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 14:30:56 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 14:30:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYRES16], 0x1c}}, 0x0) 14:30:56 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 14:30:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 14:30:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffb}, 0x8) 14:30:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001500), &(0x7f0000001540)=0x4) [ 349.190271][T12043] sctp: [Deprecated]: syz-executor.2 (pid 12043) Use of int in maxseg socket option. [ 349.190271][T12043] Use struct sctp_assoc_value instead [ 349.453264][ T9521] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 349.852699][ T9521] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 350.092916][ T9521] usb 6-1: string descriptor 0 read error: -22 [ 350.102189][ T9521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.116707][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.154540][T12037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 350.173456][T12037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 350.203359][ T9521] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 350.406888][ T7] usb 6-1: USB disconnect, device number 44 14:30:57 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x2, 0x0, @dev}, 0x10) 14:30:57 executing program 0: syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x103000) 14:30:57 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:30:57 executing program 2: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 14:30:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x0) 14:30:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000840)='batadv\x00', 0xffffffffffffffff) 14:30:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 14:30:57 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x5, &(0x7f00000017c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4}}, {0x0, 0x0}]}) 14:30:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f}}, 0x20) 14:30:58 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) [ 351.242547][ T7] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 351.322813][ T9299] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 351.573184][ T9299] usb 5-1: Using ep0 maxpacket: 32 [ 351.614376][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 351.703175][ T9299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.719205][ T9299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.092711][ T9299] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 352.105709][ T9299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.118205][ T9299] usb 5-1: Product: syz [ 352.124551][ T9299] usb 5-1: SerialNumber: syz [ 352.412768][ T9299] usbhid 5-1:1.0: can't add hid device: -22 [ 352.420745][ T9299] usbhid: probe of 5-1:1.0 failed with error -22 [ 352.435806][ T9299] usb 5-1: USB disconnect, device number 38 [ 353.163170][ T9299] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 353.413447][ T9299] usb 5-1: Using ep0 maxpacket: 32 [ 353.533037][ T9299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.548890][ T9299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.913081][ T9299] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 353.927402][ T9299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.943385][ T9299] usb 5-1: Product: syz [ 353.949181][ T9299] usb 5-1: SerialNumber: syz 14:31:00 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:31:00 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2bc800) 14:31:00 executing program 3: r0 = fsopen(&(0x7f0000000180)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='l2tp\x00', &(0x7f0000000200)='l2tp\x00', 0x0) 14:31:01 executing program 3: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) 14:31:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000440)='C', 0x1, 0x20000}]) openat$dir(0xffffff9c, &(0x7f0000001780)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0, 0xfffffe1b}], 0x1, 0x9, 0x0) [ 354.105371][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 14:31:01 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'ipvlan0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) [ 354.131451][ T9299] usbhid 5-1:1.0: can't add hid device: -22 [ 354.140557][ T9299] usbhid: probe of 5-1:1.0 failed with error -22 [ 354.156091][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.167439][ T9299] usb 5-1: USB disconnect, device number 39 [ 354.168916][ T50] audit: type=1804 audit(1615732261.107:4): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir932870897/syzkaller.f4kCdH/96/bus" dev="sda1" ino=14190 res=1 errno=0 [ 354.208657][ T7] usb 6-1: can't set config #1, error -71 [ 354.217217][ T7] usb 6-1: USB disconnect, device number 45 14:31:01 executing program 3: ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) [ 354.301219][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:31:01 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000010c0)={@random="1735b045ca7f", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 354.334635][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.353154][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.507300][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.529095][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.553969][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.582515][ T7] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 354.943032][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 14:31:04 executing program 1: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:31:04 executing program 3: syz_io_uring_setup(0x4069, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) io_uring_setup(0x0, 0x0) 14:31:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff020000000000000000000000000001ff0100000000000000000000f1ff000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001"], 0xec}}, 0x0) 14:31:04 executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000a40)='/dev/nvme-fabrics\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 14:31:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff020000000000000000000000000001ff0100000000000000000000f1ff000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001"], 0xec}}, 0x0) 14:31:04 executing program 3: getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) 14:31:04 executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000a40)='/dev/nvme-fabrics\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 357.182721][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 14:31:04 executing program 3: r0 = syz_io_uring_setup(0x4708, &(0x7f0000000000)={0x0, 0xb0b1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5ebd, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 357.225131][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.273216][ T7] usb 6-1: can't set config #1, error -71 [ 357.281898][ T7] usb 6-1: USB disconnect, device number 46 [ 357.652694][ T7] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 358.022844][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 14:31:07 executing program 0: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x2e00}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff020000000000000000000000000001ff0100000000000000000000f1ff000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 14:31:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002c40)={'sit0\x00', &(0x7f0000002bc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 14:31:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_delroute={0x20, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 14:31:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1}]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x3}, 0x20) 14:31:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x38}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x3c}}, 0x0) 14:31:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/229, 0x1a, 0xe5, 0x3}, 0x20) 14:31:07 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 14:31:07 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000002380)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000024c0)={&(0x7f00000023c0), 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x1c}, 0x1c}}, 0x0) [ 360.284580][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 14:31:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:07 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000002380)) 14:31:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0x474) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xb0000004}) [ 360.332555][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:31:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 360.372966][ T7] usb 6-1: can't set config #1, error -71 [ 360.399993][ T7] usb 6-1: USB disconnect, device number 47 [ 360.412188][T12220] device veth0_macvtap left promiscuous mode 14:31:07 executing program 0: clock_gettime(0x1, &(0x7f0000004a40)) 14:31:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a00f32d"], 0x14}}, 0x0) 14:31:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x2}}, 0x1c}}, 0x0) 14:31:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) [ 360.520021][T12236] macvtap0: mtu less than device minimum 14:31:07 executing program 2: socketpair(0x2, 0x3, 0x7, &(0x7f0000000440)) 14:31:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000080)=""/229, 0x1a, 0xe5, 0x3}, 0x20) 14:31:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 14:31:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x30}}, 0x0) 14:31:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0}], 0x0, &(0x7f0000002840)={[{@fat=@time_offset={'time_offset'}}]}) 14:31:07 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5d, 0x43, 0xd8, 0x20, 0xf11, 0x2070, 0x9ec9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x5, 0x17, 0x39, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x88, 0xef}}]}}]}}, 0x0) 14:31:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18}, 0x18) 14:31:07 executing program 3: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [ 360.645506][T12249] FAT-fs (loop0): bogus number of reserved sectors [ 360.666713][T12249] FAT-fs (loop0): Can't find a valid FAT filesystem 14:31:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/229, 0x1a, 0xe5, 0x3}, 0x20) 14:31:07 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) [ 360.746904][T12249] FAT-fs (loop0): bogus number of reserved sectors [ 360.756982][T12249] FAT-fs (loop0): Can't find a valid FAT filesystem 14:31:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) [ 360.847556][T12249] FAT-fs (loop0): bogus number of reserved sectors [ 360.857707][T12249] FAT-fs (loop0): Can't find a valid FAT filesystem 14:31:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@ptr, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "e2d4"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "568d"}]}}, &(0x7f0000000180)=""/133, 0x42, 0x85, 0x1}, 0x20) [ 360.923144][ T9597] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 360.982606][ T9463] Bluetooth: hci1: command 0x0406 tx timeout [ 360.982686][ T9521] Bluetooth: hci0: command 0x0406 tx timeout [ 360.992022][ T9463] Bluetooth: hci3: command 0x0406 tx timeout [ 361.010287][ T9521] Bluetooth: hci2: command 0x0406 tx timeout [ 361.172588][ T9597] usb 7-1: Using ep0 maxpacket: 32 [ 361.292807][ T9597] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.305765][ T9597] usb 7-1: config 0 interface 0 altsetting 32 has an invalid endpoint with address 0x0, skipping [ 361.319937][ T9597] usb 7-1: config 0 interface 0 has no altsetting 1 [ 361.482738][ T9597] usb 7-1: New USB device found, idVendor=0f11, idProduct=2070, bcdDevice=9e.c9 [ 361.503534][ T9597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.515996][ T9597] usb 7-1: Product: syz [ 361.521084][ T9597] usb 7-1: Manufacturer: syz [ 361.527506][ T9597] usb 7-1: SerialNumber: syz [ 361.536333][ T9597] usb 7-1: config 0 descriptor?? [ 361.584768][ T9597] ldusb 7-1:0.0: Interrupt in endpoint not found [ 361.790004][ T9597] usb 7-1: USB disconnect, device number 12 [ 362.582528][ T9463] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 362.853432][ T9463] usb 7-1: Using ep0 maxpacket: 32 [ 362.982833][ T9463] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 362.993228][ T9463] usb 7-1: config 0 interface 0 altsetting 32 has an invalid endpoint with address 0x0, skipping [ 363.006154][ T9463] usb 7-1: config 0 interface 0 has no altsetting 1 [ 363.193536][ T9463] usb 7-1: New USB device found, idVendor=0f11, idProduct=2070, bcdDevice=9e.c9 [ 363.204818][ T9463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.214529][ T9463] usb 7-1: Product: syz [ 363.219724][ T9463] usb 7-1: Manufacturer: syz [ 363.229510][ T9463] usb 7-1: SerialNumber: syz [ 363.241150][ T9463] usb 7-1: config 0 descriptor?? [ 363.283789][ T9463] ldusb 7-1:0.0: Interrupt in endpoint not found [ 363.484208][ T9463] usb 7-1: USB disconnect, device number 13 14:31:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000130001"], 0x20}}, 0x0) 14:31:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40110}}, 0x20}}, 0x0) 14:31:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x18, @dev}]}, 0x30}}, 0x0) 14:31:10 executing program 1: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 14:31:10 executing program 1: add_key$fscrypt_v1(&(0x7f0000000680)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:31:10 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00', 0xffffffffffffffff) 14:31:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x0, 0x82}, 0x20) 14:31:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000130001"], 0x20}}, 0x0) 14:31:10 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 14:31:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000130001"], 0x20}}, 0x0) 14:31:10 executing program 0: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:10 executing program 1: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:31:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000130001"], 0x20}}, 0x0) 14:31:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x59}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}}, 0x0) 14:31:10 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x0, 0x0) 14:31:10 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 14:31:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x59}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x38}}, 0x0) 14:31:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) 14:31:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x19, @dev}]}, 0x30}}, 0x0) 14:31:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x161000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:31:10 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x20831, 0xffffffffffffffff, 0x0) 14:31:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @in={0x2, 0x0, @remote}, @vsock={0x28, 0x0, 0x0, @host}, @tipc=@name, 0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='sit0\x00'}) 14:31:11 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x20831, 0xffffffffffffffff, 0x0) 14:31:11 executing program 1: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @in={0x2, 0x0, @multicast2}, @can, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 14:31:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003a00010700000000000000000a"], 0x14}}, 0x0) 14:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) 14:31:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x541b, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) 14:31:11 executing program 2: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) [ 364.265148][T12402] FAT-fs (loop3): bogus number of reserved sectors 14:31:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/229, 0x1000000, 0xe5, 0x3}, 0x20) [ 364.273438][T12402] FAT-fs (loop3): Can't find a valid FAT filesystem 14:31:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000040)={'veth0_to_bridge\x00', @ifru_mtu}) [ 364.366811][T12402] FAT-fs (loop3): bogus number of reserved sectors [ 364.383130][T12402] FAT-fs (loop3): Can't find a valid FAT filesystem 14:31:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000004900210226bd7000fddbdf250a"], 0x24}}, 0x0) 14:31:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/229, 0x1a, 0xe5, 0x3}, 0x20) [ 364.457459][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:31:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10}]}]}}, &(0x7f0000001e00)=""/170, 0x2e, 0xaa, 0x1}, 0x20) 14:31:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000000c0)={'vxcan1\x00', @ifru_hwaddr=@remote}) 14:31:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000004"], &(0x7f0000000680)=""/228, 0xa0, 0xe4, 0x1}, 0x20) 14:31:12 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$rtc(&(0x7f00000003c0)='/dev/rtc#\x00', 0x0, 0x0) 14:31:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={[], [], @remote}}}) 14:31:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000080)={[{@fat=@dmask={'dmask'}}]}) 14:31:12 executing program 3: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) [ 365.280607][T12443] FAT-fs (loop2): bogus number of reserved sectors 14:31:12 executing program 0: bpf$BPF_BTF_LOAD(0x6, 0x0, 0x4000) [ 365.291047][T12443] FAT-fs (loop2): Can't find a valid FAT filesystem 14:31:12 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000050000000e0000000000000a0200000010001d000000000e050000000100000000000000bb3a472400020000000700000005000000ee25eae6c4eb654e8f22cf0000000b05000000160000000000000b01"], &(0x7f0000000080)=""/176, 0x69, 0xb0, 0x1}, 0x20) 14:31:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x3}, 0x20) 14:31:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:12 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000440)) [ 365.364366][T12443] FAT-fs (loop2): bogus number of reserved sectors [ 365.374542][T12443] FAT-fs (loop2): Can't find a valid FAT filesystem 14:31:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/229, 0x1a, 0xe5, 0x3}, 0x20) 14:31:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0xa}]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x3}, 0x20) 14:31:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:12 executing program 0: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) 14:31:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa0000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) 14:31:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:12 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 14:31:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) 14:31:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x161000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 14:31:12 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20832, 0xffffffffffffffff, 0x0) 14:31:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 14:31:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) 14:31:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getneigh={0x20, 0x1e, 0x1}, 0x20}}, 0x0) 14:31:13 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x20831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) 14:31:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x2}, 0x40) 14:31:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) [ 366.562797][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:31:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=']) 14:31:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) 14:31:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x30, 0x61]}}, &(0x7f00000003c0)=""/156, 0x37, 0x9c, 0x1}, 0x20) 14:31:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) [ 366.646924][T12514] FAT-fs (loop3): Unrecognized mount option "iocharset=" or missing value 14:31:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:13 executing program 1: clock_gettime(0x9025b50ac4f3504a, 0x0) 14:31:13 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x7fffdf002000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) 14:31:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 366.753719][T12514] FAT-fs (loop3): Unrecognized mount option "iocharset=" or missing value 14:31:13 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 14:31:13 executing program 2: syz_io_uring_setup(0x5507, &(0x7f0000000040), &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 14:31:13 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 14:31:13 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) 14:31:13 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000002380)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002440)={0x1c}, 0x1c}}, 0x0) 14:31:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/229, 0x18, 0xe5, 0x3}, 0x20) 14:31:13 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x20831, 0xffffffffffffffff, 0x0) 14:31:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x59}]}, 0x30}}, 0x0) 14:31:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x2}]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x3}, 0x20) 14:31:13 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 14:31:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'ipvlan1\x00', @ifru_mtu}) 14:31:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_mtu}) 14:31:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0xa, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/229, 0x1a, 0xe5, 0x3}, 0x20) 14:31:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xd}, 0x40) 14:31:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x7a}]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x3}, 0x20) 14:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xeb000000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) 14:31:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:14 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) [ 367.254298][T12582] device veth0_macvtap left promiscuous mode 14:31:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x59}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x38}}, 0x0) 14:31:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002c40)={'sit0\x00', 0x0}) 14:31:14 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004580)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000040)={'wlan1\x00', @ifru_mtu}) 14:31:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x3}, 0x20) 14:31:14 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) 14:31:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0]}}, &(0x7f00000003c0)=""/156, 0x36, 0x9c, 0x1}, 0x20) 14:31:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x18, 0x1, @dev}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x3c}}, 0x0) 14:31:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xeb000000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) [ 368.241756][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:31:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 14:31:15 executing program 2: bpf$BPF_BTF_LOAD(0xf, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:15 executing program 1: add_key$fscrypt_v1(&(0x7f0000000680)='logon\x00', &(0x7f00000006c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000700)={0x0, "03c46c06711984e8d2fee6bcca3df1f7e7b1b611f383ee22f1b6ebc207a636198cd5c29ebf8868aae876d5718ef02b43193d1109794e4e5432565923b687fcda"}, 0x48, 0xfffffffffffffffe) 14:31:15 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x20831, 0xffffffffffffffff, 0x0) 14:31:15 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/urandom\x00', 0x0, 0x0) 14:31:15 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) socket(0x0, 0x0, 0x0) 14:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xeb000000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) 14:31:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 14:31:16 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x20831, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 14:31:16 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 14:31:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x11, r0, 0x0) 14:31:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x3}]}, 0x28}}, 0x0) 14:31:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x7}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 14:31:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57}]}}, &(0x7f00000002c0)=""/217, 0x2a, 0xd9, 0x1}, 0x20) 14:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xeb000000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) 14:31:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x5411, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc000000ca7899"], 0xbc}}, 0x0) 14:31:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 14:31:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) 14:31:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280), 0xa}, 0x10000000}], 0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 14:31:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000002c0)=""/217, 0x2a, 0xd9, 0x1}, 0x20) 14:31:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x400000, &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@fat=@nocase='nocase'}]}) 14:31:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000200)={'ip6tnl0\x00', @ifru_data=0x0}) 14:31:17 executing program 3: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x20831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) 14:31:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @in={0x2, 0x0, @remote}, @vsock={0x28, 0x0, 0x0, @my=0x1}, @tipc=@id, 0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='wg1\x00'}) 14:31:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_delroute={0x4c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_FLOW={0x8}, @RTA_METRICS={0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8}}, @RTA_PREFSRC={0x8}, @RTA_OIF={0x8}]}, 0x4c}}, 0x0) 14:31:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000040)={'macvtap0\x00', @ifru_mtu}) 14:31:18 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) 14:31:18 executing program 2: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 14:31:19 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x24931, 0xffffffffffffffff, 0x0) 14:31:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000130001000000000e0000000007000000", @ANYRES32=r1], 0x20}}, 0x0) 14:31:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x1b, 0x21, 0x1}, 0x1c}}, 0x0) 14:31:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f00000002c0)=""/217, 0x2a, 0xd9, 0x1}, 0x20) 14:31:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 0xb0, 0x1}, 0x40) 14:31:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3a8e19f1021d324d5db31f9328170957b99f900f16863b318be28f045bd69c093306"], 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x80000) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000000)={0x6, 0x3, @name="174bc246bae01ac3ee21bd1a9c40f69976afdfebed6e3f85d060895b519d30ff"}) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) r2 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, 0x0) r3 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000180)={0x0, @src_change}) r4 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000014c0)) 14:31:19 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0xc0046d00, 0x0) 14:31:19 executing program 0: syz_mount_image$befs(&(0x7f0000000000)='befs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000004c0)=[{0x0}, {0x0, 0x0, 0x446}, {&(0x7f0000000280), 0x0, 0x9}], 0x8010, &(0x7f0000000600)={[], [{@obj_user={'obj_user', 0x3d, 'befs\x00'}}, {@fsmagic={'fsmagic'}}, {@measure='measure'}, {@appraise_type='appraise_type=imasig'}]}) 14:31:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8201, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 14:31:19 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000000)) [ 372.196386][T12739] loop0: detected capacity change from 0 to 4 14:31:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, @xdp, @sco={0x1f, @fixed}, @nl=@unspec, 0x3}) [ 372.224202][T12739] befs: Unrecognized mount option "obj_user=befs" or missing value 14:31:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 14:31:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000040)={0x2, @sliced}) 14:31:19 executing program 1: keyctl$get_persistent(0x12, 0xee00, 0x0) 14:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) [ 372.328604][T12739] loop0: detected capacity change from 0 to 4 [ 372.345412][T12739] befs: Unrecognized mount option "obj_user=befs" or missing value 14:31:19 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xd9, &(0x7f00000000c0)=""/217, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x12, 0x6, 0x0, 0x6, 0x0, 0x1}, 0x40) 14:31:19 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x402c582a, 0x0) 14:31:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 14:31:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 14:31:19 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)) 14:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), 0x4) 14:31:19 executing program 1: clone(0x8000000, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)="b7a4f431e0675b16d6b9eb36e26c0d798c80c637fc8e6f06e3547a3ad659ed08c3bdcf00ff245a07982ffeeb766730d1d5609237c98159301a37baba7401b5694000edba39759a89742a863021a3054a37ac05483585647d334ff95e2eb5e2e2b1d0321c4b49fb10ed5a940be2abae6d36ec5c588402d0e6a8514b78") 14:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 14:31:19 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 14:31:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x40) 14:31:19 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) 14:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 14:31:19 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 14:31:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x10]}}, &(0x7f00000000c0)=""/151, 0x2a, 0x97, 0x1}, 0x20) 14:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 14:31:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 14:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:19 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000000)) 14:31:19 executing program 3: syz_io_uring_setup(0x543a, &(0x7f00000000c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x21ff, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 14:31:19 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}}, &(0x7f0000000400)) 14:31:19 executing program 2: socketpair(0x2, 0xa, 0x0, &(0x7f0000000440)) 14:31:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x2, 0x4) [ 372.905217][T12819] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 14:31:19 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) 14:31:19 executing program 1: openat$vcsa(0xffffff9c, 0x0, 0x414100, 0x0) 14:31:19 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, 0x0, 0xe2) 14:31:19 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000002e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 14:31:19 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) 14:31:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x40) 14:31:19 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) 14:31:20 executing program 2: clone(0x40000080, &(0x7f0000000000), 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0) 14:31:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd7a, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:20 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) [ 373.106268][T12840] IPVS: ftp: loaded support on port[0] = 21 14:31:20 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 14:31:20 executing program 1: r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, 0x0) 14:31:20 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) 14:31:20 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)) [ 373.191655][T12840] IPVS: ftp: loaded support on port[0] = 21 14:31:20 executing program 3: r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x302, 0x0) write$P9_RATTACH(r0, &(0x7f0000000180)={0x14}, 0x14) 14:31:20 executing program 2: syz_io_uring_setup(0x543a, &(0x7f00000000c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x21ff, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 14:31:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002bc0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000002540)=@raw=[@call], &(0x7f0000002740)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000002a40)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:20 executing program 0: r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 14:31:20 executing program 3: r0 = socket(0x2, 0x3, 0x3) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 14:31:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000000140)) 14:31:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 14:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 14:31:20 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000000000)) 14:31:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x10}, 0x0) 14:31:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:20 executing program 0: r0 = getpgid(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000002540)='/proc/cgroups\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 14:31:20 executing program 3: fanotify_init(0x3c, 0x0) 14:31:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000300)={0x0, "1da50a5eb364c21533c63811de831a0e379b9593fef1768660cda8cff6cb5b4c28290758c9d1e44bf84b86ef9385fa728991c98c2eefcbeba6f2277d5eb551c4"}, 0x48, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffa) 14:31:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x40) 14:31:20 executing program 0: openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) 14:31:20 executing program 1: mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)) 14:31:20 executing program 0: r0 = socket(0x2, 0xa, 0x0) connect$caif(r0, 0x0, 0x0) 14:31:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x10000, 0x0, 0x6, 0x0, 0x1}, 0x40) 14:31:20 executing program 3: keyctl$search(0xc, 0x0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffa) 14:31:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x8, 0x0, 0x2500) 14:31:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0x0, 0x0, 0x801}, 0x30) 14:31:20 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/51) 14:31:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:31:20 executing program 3: socket(0x28, 0x0, 0x5) 14:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 14:31:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001500)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x300}, 0x0) 14:31:20 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:31:20 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:31:20 executing program 1: r0 = openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 14:31:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001500)={0x14}, 0x14}, 0x300}, 0x0) 14:31:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:20 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.opaque\x00', 0x0, 0x40000, 0x0) 14:31:21 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 14:31:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000163) 14:31:21 executing program 3: clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="7a9142c4abaac675ce3519ec60f154b5466752c5c4874d515390c8111b32724a3da79a4fe3975437a0bf912bd843b6a98efba93fb6b61bcaf9c0b4d67ad7387f6f060b6da3bdf333146fdd044c3a2756e2f03a52111cbd79caaed246c015") 14:31:21 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '#{@$\x00'}) 14:31:21 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = mq_open(&(0x7f0000000180)='^.\x00', 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 14:31:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:21 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:31:21 executing program 0: setresgid(0xee01, 0xee00, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:31:21 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r1) 14:31:21 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x41000002) 14:31:21 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x4, 0x0, 0x5}) 14:31:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x300}, 0x0) 14:31:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 14:31:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f00000001c0)=@raw=[@func], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x9f, &(0x7f0000000280)=""/159, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd7f, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x6c9, 0x0, 0x0) 14:31:21 executing program 1: bpf$MAP_CREATE(0x1e, 0x0, 0x0) 14:31:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300}, 0x0) 14:31:21 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x7, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000380)=""/161, 0x2b, 0xa1, 0x1}, 0x20) 14:31:21 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x72000003) 14:31:21 executing program 3: openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x595582, 0x0) 14:31:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000100)=0x8d0) 14:31:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4) 14:31:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x19, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 14:31:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000100)=0x8d0) 14:31:22 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000100)=""/201, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000080)=@raw=[@func], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:22 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x5b1002, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 14:31:22 executing program 1: r0 = io_uring_setup(0x1371, &(0x7f0000000040)={0x0, 0x94bf, 0x0, 0x2, 0x6c}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 14:31:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000100)=0x8d0) 14:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001500)={0xfac, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xf98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5ba16337a32e357fc4270693d0a0598711c3ca6bbf60358f5675ec03a1"}}, @TIPC_NLA_NODE_ID={0xf4b, 0x3, "81745363b7a9841fa9740f093fd4606b172e90e9ecb80cdac6d984dd9da00c7823eb3e4b4fe91e5b3139ab8c7c0858042a044ec29c4e8566773075a671d57b72a8d8063592490659cad92d4e952ceb8619d5af1c46a8d23a6dba93cc166d307c9b6865cc0ecf4072787a79f72f25e4fef70e2f95f3d0470af6f11d06db8b3e8080d7011a5931491a5742586b8ae713fc80ccedba739458c0a4771a9276ce39b64c78a1613128cc3bc9e3d91466af20887396db36eb3c2122fd69e3f8a56d280676a005674b8ed6c299a06a7830b03952109aab25a0814d99aa893dfb61d941426199403338f05bd3c404a15b081147f397a9ca1b412d997dec4cea46477d7baa3cfd1541efb0aec9f90c00493290874f417bcff5c6ee4db2552839360fd3a400c49f3f54b457776d0f5630fac9a042c5c2153339c2daf31bc1fd075e50cd99c5d1ceef2cd2a6eba80aad53c6220b002098f8165fce73c7bc13ad3b70539ececa4aa8013e9ce2de704ffdd36392a634e28023a7bdbdb9978e14968f2ac661796c37d671fc6de1933054e877e37b472865c6aaee3edf7a840cd39b39a38f95511773a28f606c85b2b34f7d8bb35afa1418983bd94fba41ef46d7b141fcb1780b9b9d406c5cbf3236e5144238057b21396acdccb9d0d909a5a8827a7da27e584722f32ac3325bf58ad8e6e91341118d96d39a94dcd8c93fd0c4f8aad4d98f874ce16d893f62ef3b69e0771ec326d9ce9d027fb2bdf56450c36534f2f9f29b9e01c86038f6f2d5868394c9d4dcb647bfe7ad23fdcc4217670eaa557be8fd506aaa453ad9aed07486f5991f6afdb999bcb178c91b0ca8f15e605221f7748480642e8195ec5bcd095392713122b67b44b309e6f8db92eef7a9bca549d4da70039e1e57cebf6ef6a7db15c9c7c0220c331f65a47086980e4bf3480a61ca8fe8b8f7b9d03dcddf8088e6d44ee601eacecf7b1b6bec23bed5093ec0206de349a1208b76af81fd08e81efab468c051a87122957603a9ccd65f2d073d2dd632491390b9a2ba41cfe612012224fdeadae5088a9255c7efe0e536c7b4b52e50007c8a0f4a44e24c3bf50e01957a9aa7d2be3b88af10c07849c02b9e115e674a5a16689301d413a3851908833b125d059f6b29a3d5f011620b5e977323202e1d07cf3e8f8902494663310532723ad3aef7d7f00f975e41ee05f4effd0d03e2e50ab045371566ee76df5cfb589f28595e2241a61407b470fd65e122bc5605e8996a59c64fe8b4ce86382f46456f16ccfb7acea4114664e16d01f831d19af6d6c6cf1e73d9cde5367360b36ab4369b52b7b490b1f4b81852c8542caef450a2e7fc21713d6c9e466614ed625bb8e7af0f1d4046db47546ef7d228bbc5a1b689c9ff507b6fd29b01aed91bc94341c03892154e15c55ab81e68642f0dc68c862ff898237d759ddba9c86a7f4151bc796705acdbb3d6852363dc1e258bb050f1db514be9cf6fb3934bad00e4a5805dd5f773a98260918acd6ba1e05c55f31229e395d78241e981eaf8e43c253eb98cfdfc06183148e1cc255d9ddd233cfa440336337d83d066785c79cbcb2e68e42b67ed7a00a9318a13d418e6a133d4c14c1c045d4c5715dd4515cf14a8f457b7a840eacfbc7620a0863796d7cb527a47ae54196c47e3771e0fbb8b9eba1bd26cb7c7341640c488b8308b45af517f08a5c91488bd492c381016223aad3e2422360187c1d409b39db6f076853e41a6db5905748df9e3f8b14a7a66ab3cb6411f62a1b6805189225daf8f37407135722a143689cb995ca436cdbc14885c3544b095ac61d415f982f24df0b84695eb29544a907c9ad5e8f57dd462fcd3e4d9260daaaa04599ca2f45af1042a96f47ad744d3889b02cda5f296f04b2c87ac71c76f57163626ce70bd8acb7bd6b2e7c5215b056e422c4c0694bb572c1008a9d9d3313e90be9dde053bbe5815881cf1148c5907f589cf38d51711c48be7e8bb6bbb3c58fc5f790afcb780b8b23527321f068bcadac86e08d68cb5b02a8880dc3bfc58adb9e927c8631ed486b66dfc7aa4ae0bd07abbaa1921f109c0cd967abb8eae7b6144f26ee7e08bd24d18cb9337122046de8d076f5b3e637aed9fa4440b7771ed21c91b408873b19dc290de47183eaf72f1fd988c4720a895377c746db3d1e8dcde4bd2db834eed562b85d46651b062f3a4e54f48d1376ac05fec361e5a834d850d323f8cb8162ed1c528d0f3a50c95ecaf6133cd59ed1e642d8c06d97010431a8593c02d181cbab7f1a86994ecdc7e8efcdd462ebff2ee3227a6259f1c660672187fd547d828ba6b417b8fec26cf6483822f6c10e9c8d4ab72ec60361dd6ba0db7ddecfc78ba35a99b92f789c818c1ae4f81dff4518c3da102a3aa1963575dc017c7d6ce86391e6d81d687265dff77f79cb0f01ca54b34854ce22f39c8a80c9336386835abc2527b1d94e67d1bef626fc77d494fba3ef5681863e7df3b2b69d7ef1e77d62cd15f040024357c105ef1b89b76e288886cebd0ac7d1b7d0134101c2ab931afcd0ba860c5c2c224bf33da8ea6f3d48f25af87fd6c4ec082a575d298f42ba7235284d521b0d5717560015fa78a81bf386fb0c7794b2bd40caae72cf78d65e184577b4acdf364cd770fe23a58510f5f5a89bc5387740531c6c9308c143b5db25b2842e43b22e0edbb8a46bb51029419ab30cda58ecd3d4e73c64cdc0f2e868908b2dd23c5b09d8355b0f41a8e9552e0baa26b5026f4c81aa4fb908718c585a8ae650e17091dd95592de84b3622f59f423d51af5769992de30ff3131b5875b4ecf22e10a8c9bd5ff214e55021388bf07a00bc3d41607057da1e9d72bbb6b26f7534b72beae1b4d8a1afe42b634b1b78d80acb8870f2e89a411b70cb69e71859eabeba74072871a7a9522b03fe196e5634bd0bf15682e5c3d7eb26dae3cd39861bb6fb182d41537e1f794c5bcb125fb9b0262b5ffc2c0551a7cecd1ef8070a6c248ab214e8a092a72ed4b5a591df526f228a5ff11814a68d18049f8bf19a323eae2a876127e0d486c82772b2330fa8aa583939302442858ff483ed8cbc8834121d1c15f9e6ab79d31f47f5c398b706254e2f6d0425052b677f366f40f9f21557ff8d65c2341cf5e5c06807a1e83f60bb467a053403fb0427872f8e5f7cbe104a1cc4b908536f1287f040064b4b3e5f46b3898f68c7d79fb0b1cf70962b9f075bc7f5a416c70a9ff8f45baaa857a3c4b1b48e08914c151c667ee715c03cefb888613bacb2509e5b5af02112e04534f62a143f71f2c8c54b653433e2f437519fe1b0e0e223a32fd15d9596d15dc75ba1ce71cf965199a38fd171d23fe9cabd09dd2c7d4c1baffe7f5d12adbdd898bf7532e4ab497f2fa0725a874215c7684d626d5c0344d60d6440c8c91b42486650c77b310912f747fcccdcb11f84ac4185ca1aef80868b4b31a99ce5f4a9e7f5549437a908289d8ea968caadbdbac53c7f151e7ab5e409e35b51f2e86d6a14c61ae80b009b42ae49747002426370c8e59e1a866dda9858f631f9dfe03b8b336f960fab0d19af01f5373409c4651dd73e33a6ffd1e16bbbc3d1bfc51bc111297f80cd1305eebab676138c3a38ad641c34a00e5f98057f892319aa658467225bf3228f0ab5b2eaf41bf9bc4e6af3443e48bae9e31c32502acc76154d8a1984043cc35219e27d1e23942387ab6c33099d0489cb170328fb81434e7c217165fda324e625d1d7e805bd0e8898c078937917cfb1095fe19f1f409791582bbcb24603d0c6a3a71a57f49b68f33818a3ffe626059fd6e3223c113048ab7adc55fd6b4fbe914f8a410ae072b74093416ba30391eeffb0c8b26b2d013e1150879f53535c948ede37a8cab6fc2e99e86a0787e95baf08499635880c7a8f2e0b4839c525b3d89e4872cf970acc9b7bc1fe63ddb847bba3b81cc7131395bd6f0a4341ba28b69e3458f51f3ef580c0ef492f0b8b020b1b94e8bc907bb0eec36c095c92404f4c5b956b54c9ad3983742741319502c6af1a137c9bdf7ecb4e633e81ac8e613e9f7ca801ad6c9bab27f25c36d70d0abfbfa3442f2a1f9683e53e242c7c0716db6140d94b7fa51bca37965fb4fb1897263a82ed6e971d849a564b69e398f19b83be5cb5db1d8f5391d815e3068c5f9fa68d6570a854880c8ba7cb4a40ddbf855dbd81a76e58b2c89dbad3d87cecae95e7360cc87e6c078d26807126adb5ff198b9c415422a5640bda5cb1b07bd7d9a51abb9a06fc3a4aeda0b4506f62b18549c04fac76738aaf488f44674c0abc57ce616739a2b927f3462245fe4518a7e30db5ad9c5feb5124efb0923f1629a800fc8f5525a352c3baf338d8ec12e2218c659fd82603afe957e31a0a53336e5bc0131934ea662bd92f62063fb57e07216d1036263519ce79b57e70b075a7484601ac486cc31397d38ec8576ef9a22152981e242f3060573518ca4cfa08ba5e65196b2300115f28e3851494ed5140c539624ae3196d11e82459f878b65007a84e8c35c9cc7946a8f75fef7e6e5e3b2080a5e3a3d340b78a8ac1a6301fdb42f5bd00c91262474cbe7181ae49d1095009fe42ac390c1c229a56540d4a250919f7164978314b5d5aa40444835c61fe09dc288a2fb8eb823dae16923f7909a7988816a17b7fc5df8369a5b6c078d7efe21860b9c31e1008892cfa32d3c8d9869186745ae6af949d5d289dcc51e0feb38fadc8fb644913e403eafb8e61ff5772c48cf9a965c14ed07fa9d561545d99386e7ba810e5c6f1d322d8eb602a2e91ab876c6aff1557f1d9fd36859cc9043e1f7ffa8a002a52d6a11c18b7027449285e32c13cdd9a294fb4192ce7a0d9a900560216f0a568b78ea57ca3f280ce980914a2825a3c28e9fd2ce9adb7a31536ebf4d1a436bfbac536747ae40592fb0770ca85022d8b559347177fe19a11559b6e43f7befcc3dc2a533b82bc638d4be5e020be5b128578d6cbf98ac9a7dafe53959eeca2e8b1cd269e0138783367d65b6244f4863bb820ad2e5c2a9236131dd73453e866379bff28f16d3ddc1c6e447b5ca06ccec6f690f91ad876f5248759644a003447859dd682f0f8cff28ca996ae92af2f67776e062fe32ae03e25d92f164fc6d576024379a56dc553fa591df0a8c4e5331ad366725d00948c5adc3192702ce6b42f4f78a4b2f451b54e5b654d5b43444927fb868f8f8879f3efc3ba4b5d253b40645da27d725f5353f274cacad40c43c45dd703bead91e4c145d35496fe5d871bd3ef7a725f1f16fb63633623c5bc833d17b5e2f827885a1c5e72ddfa69f122fbd7aa4baf74c3a76ea4fa645e4f9428925cd867e6ec3ba26476417822293720f5e7bd5d789243ddd1bf13a053b4a39d373b2f2e7b99afd4aa3fc812e644b9ad65853c1f6c03fdd5e6b563dc433da287499566f0be51703e2bbf5dbab82574bcaa5b11633f9d153d72cd5921d18e6d54075a80fddf11d04bacc4470ff6089cac8b47f19726f1a220c8f6c0555238cde84eec277db33f84f12f09b1199"}]}]}, 0xfac}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008810) 14:31:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x8, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:22 executing program 0: openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xe40, 0x0) 14:31:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)={0x0, 0xfe, [], [@jumbo, @pad1, @generic={0x0, 0x7e6, "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"}]}, 0x800) 14:31:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000100)=0x8d0) 14:31:22 executing program 3: fanotify_init(0x1b, 0x0) 14:31:22 executing program 1: r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000000)) 14:31:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) 14:31:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={0x0}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00', r0) 14:31:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0xca0, 0x1}, 0x40) 14:31:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x8, 0x0, 0x0) 14:31:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:22 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000380)=""/161, 0x32, 0xa1, 0x1}, 0x20) 14:31:22 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000180)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x0) 14:31:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x21) 14:31:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x20001774) 14:31:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, 0x0, 0x0) 14:31:22 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'}) 14:31:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)=0xfc000000) 14:31:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0xade, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:22 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 14:31:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x52c, 0x130, 0x130, 0x410, 0x328, 0x0, 0x53c, 0x53c, 0x53c, 0x53c, 0x53c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@dev, @ipv4=@local}}}, {{@ipv6={@local, @local, [], [], 'team_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@empty}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) 14:31:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={0x0, 0x55}}, 0x0) 14:31:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 14:31:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 14:31:22 executing program 1: openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8040, 0x0) 14:31:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x2, 0x4, 0x9bd6, 0x6, 0x140}, 0x40) 14:31:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{}, [@generic={0x3f}, @jmp]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x99, &(0x7f00000000c0)=""/153, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0}, 0x74) 14:31:22 executing program 2: mq_open(&(0x7f00000000c0)='#\x00', 0x0, 0x0, &(0x7f0000000180)) 14:31:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x810, 0x1}, 0x40) 14:31:22 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc, 0x0, "40f99b9b"}, &(0x7f0000000100), 0x1000) 14:31:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000000c0)=""/151, 0x28, 0x97, 0x1}, 0x20) 14:31:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x17) 14:31:22 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 14:31:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x344, 0x5, 0x0, 0x1, [{0x2c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xb6c, 0x5, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}]}, {0x2bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x294, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}]}]}, 0xec4}}, 0x0) 14:31:23 executing program 1: r0 = openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc01047d0, 0x0) 14:31:23 executing program 3: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) [ 376.107190][T13142] fuseblk: Bad value for 'fd' 14:31:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) [ 376.117390][T13145] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 14:31:23 executing program 0: socket(0x2, 0x0, 0x7a0c) 14:31:23 executing program 3: setuid(0xee01) openat$tun(0xffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 14:31:23 executing program 1: io_uring_setup(0x406a, &(0x7f0000000000)={0x0, 0x0, 0x8}) 14:31:23 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) 14:31:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:23 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x18, 0x0, 0x0) 14:31:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000001980)="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", 0x5ad, 0x0, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 376.284479][T13160] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:31:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b4, 0xffffffff, 0x244, 0x244, 0x148, 0xffffffff, 0xffffffff, 0x33c, 0x33c, 0x33c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@unspec=@mac={{0x2c, 'mac\x00'}, {@link_local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'team0\x00'}}}, {{@ipv6={@mcast1, @private1, [], [], 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'ip6gretap0\x00', 'macvlan0\x00'}, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x410) 14:31:23 executing program 0: bpf$MAP_CREATE(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 14:31:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:23 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/151, 0x29, 0x97, 0x1}, 0x20) 14:31:23 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee01, 0x0, 0x0) 14:31:23 executing program 2: syz_io_uring_setup(0x5a67, &(0x7f0000000480)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 14:31:23 executing program 3: r0 = openat$tun(0xffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 14:31:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1c}}, 0x0) 14:31:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12}, 0x40) 14:31:23 executing program 3: openat$null(0xffffff9c, &(0x7f0000000900)='/dev/null\x00', 0x4eaf3c607d3dd1fe, 0x0) 14:31:23 executing program 2: syz_io_uring_setup(0x5a67, &(0x7f0000000480)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 14:31:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:23 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000300)={0x0, "1da50a5eb364c21533c63811de831a0e379b9593fef1768660cda8cff6cb5b4c28290758c9d1e44bf84b86ef9385fa728991c98c2eefcbeba6f2277d5eb551c4"}, 0x48, 0xfffffffffffffffd) keyctl$search(0x6, r0, 0x0, 0x0, 0xfffffffffffffffa) 14:31:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev}, 0x1c) 14:31:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}], 0x1, 0x4004) 14:31:23 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 14:31:23 executing program 2: syz_io_uring_setup(0x5a67, &(0x7f0000000480)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 14:31:23 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x0, 0x0) connect$caif(r0, 0x0, 0x0) 14:31:23 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'}) 14:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x90d, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:31:23 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x7}, 0x0, &(0x7f0000000280)={r0, r1+60000000}, 0x0) 14:31:23 executing program 2: syz_io_uring_setup(0x5a67, &(0x7f0000000480)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 14:31:23 executing program 0: r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x8}, 0x0, 0x0) 14:31:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001300)) 14:31:23 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000080)=@raw=[@func, @initr0], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x37, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x3dc, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x154, 0x184, 0x0, {}, [@common=@ipv6header={{0x24, 'ipv6header\x00'}}, @common=@srh1={{0x8c, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x438) 14:31:23 executing program 3: r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 14:31:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, 0x0, 0x0) 14:31:23 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 14:31:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:31:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 14:31:24 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) 14:31:24 executing program 1: io_uring_setup(0x47fe, &(0x7f0000000080)={0x0, 0x0, 0x20}) 14:31:24 executing program 0: syz_mount_image$romfs(&(0x7f0000000540)='romfs\x00', &(0x7f0000000580)='./file1\x00', 0x3ff, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000006c0)) 14:31:24 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='i', 0x1, 0xfffffffffffffffd) keyctl$link(0xb, r0, 0xfffffffffffffffc) 14:31:24 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC]) [ 377.223517][T13255] loop0: detected capacity change from 0 to 1 14:31:24 executing program 2: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) [ 377.250698][T13255] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 377.268492][T13263] fuse: Bad value for 'fd' [ 377.271208][T13262] fuse: Bad value for 'fd' [ 377.277744][T13263] fuse: Bad value for 'fd' [ 377.283712][T13262] fuse: Bad value for 'fd' [ 377.334360][T13255] loop0: detected capacity change from 0 to 1 [ 377.345636][T13255] MTD: Attempt to mount non-MTD device "/dev/loop0" 14:31:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000100)) 14:31:24 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10}, 0x10}}, 0x0) 14:31:24 executing program 0: r0 = socket(0x2, 0x3, 0x3) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) 14:31:24 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 14:31:24 executing program 0: socket(0x2c, 0x3, 0x6) 14:31:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 14:31:24 executing program 3: r0 = getpid() process_vm_writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000380)=""/164, 0xa4}], 0x2, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/198, 0xc6}], 0x1, 0x0) 14:31:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote, @private0, @mcast2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x140001c}) 14:31:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @dev}, 0x1c, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f00000004c0)='^', 0x1}], 0x3}}], 0x1, 0x0) 14:31:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x1, 0x9, 0x3}, 0x14}}, 0x0) 14:31:25 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1c, 0x0, 0x0) 14:31:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0xf) 14:31:25 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 14:31:25 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x3) 14:31:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001500)={0xfbc, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xfa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5ba16337a32e357fc4270693d0a0598711c3ca6bbf60358f5675ec03a1"}}, @TIPC_NLA_NODE_ID={0xf5a, 0x3, "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"}]}]}, 0xfbc}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008810) 14:31:25 executing program 0: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000500)) 14:31:25 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2, 0x5}]}]}}, &(0x7f0000000380)=""/161, 0x32, 0xa1, 0x1}, 0x20) 14:31:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000080)={'vlan0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 14:31:25 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0) 14:31:25 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)) 14:31:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180)) 14:31:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000), 0x4) 14:31:25 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x5b1002, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5450, 0x0) 14:31:25 executing program 2: r0 = getpid() ptrace$setopts(0x4206, r0, 0x319b, 0x0) 14:31:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@remote, @link_local, @void, {@ipv4={0x800, @dccp={{0x10, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x27, 0x0, [@multicast2, @multicast2, @dev, @broadcast, @empty, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x4}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "cc6b41", 0x0, "721a82"}}}}}}, 0x0) 14:31:25 executing program 3: socket(0x1, 0x0, 0x7ff) 14:31:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000001980)="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", 0x5e8, 0x0, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 14:31:25 executing program 3: r0 = openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_UIE_OFF(r0, 0x7004) 14:31:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 378.589086][T13346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:31:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:25 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, 0x0) 14:31:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1d, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:25 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0xffffffffffffffff) 14:31:25 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 14:31:25 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x577a8310b3e43e7f, 0xffffffffffffffff, 0x8000000) 14:31:25 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 14:31:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)="df3e8b816de9805a8dd7bc67c346134e43027501001d6f3888ab4775e398ad19667b67b3d67c16232b2321cade3d0a269f2d3fd127309c017af2a017bef42a9c86a30279a011aee152d1067fb50186eb17c4c9787ec965728e702961114ccea878ab2692cd30bd529ad27d59be1fe5340135025984ce6904452cb842f373c269648eaa779404f2aeadea53afdc15bec859157717b4577a98ad441046151ba06022f0d654185cc6ce1832b30c6b850cc7f9d5b177c31b5871721d109c802d4eb855060152c21a3aa9b4e7c66c466e5c46af2107719800ea13a72a3b182e0ae86e230774fd9307e56414e5244580ff01dab086734aabf3c235f37e7c3a712c17bf8e56bc1bb1103b1ca5fa698b77a0b88a3bf8af004e6017bfc8c020420938b4ceb29e9bee46e895819c38bfc3ca82cdc49f5d7fa8807c4dbcaff64eb9d543824fb1059a2a65857531865e62dba044ae0f0b138d699aea0c2045068439788fb61a895826ca44327be498615dcf33f220485aad96b72b5c4891cbd4df462ec9c9b3742045142e010d0a189bb380df8f5f6e767468fd639781ac2d16912bddf047a09f6bf6fcb11488d128b4a9397c492399324194327b5f4535fdd4db733ba5349823b0c85d654828c3eda2e05ba0aed254a1760afd2ce9d805a68a06ba610d4b060552513057d7080f821d5d6c718540021b454bca3484c399cfbea8c93a3b0e8e3f17b3d4bf092a5160aaf4a667299677bef0be660ebad820fbe7f256ab624f681a985f70372be5a97af29d385dda2bd96718bb2cb212cae3bf5e98b8bd121350eec0b49117e26a49e64d133783320ace5a6240f925a495efcb6af4557ed16d8d4d9695fb521b4499f7026e477f8bdef91cfe5926e8b46b0490dfd64067e00c87c3c1616d34427f73b5ed9fbe8339f069e1b4f26c44ca0287fdb8b371740a2ce61179ee080e1178d37d3396472c64db5f6569e474c6168717425116bb854af29c4458d3616238b2e0077b2d9a9221d936cd26094c2cce4d6defa5e5d3ce631837e24ced9f021f9886effa39e3d01fd5a41b7c6a0687d170b6539364728812e563f2f29a6326fa52dccb82ca144e47030764f08f76ef177b9d6e714774d3b5e2eb7dc042808048638c08c15439c508a9fe8a210af770223e8cd3b60bcc4345494fe1db164f349776dec9e3a318b7bfedc3d7620a6084d9175dc7628884639bf19924177df10a61c03ae934f56cf6365ca986fc96e35b69da0d591845777f345a9098b7eda00e7d35073c4fa3a1c335a5abe54369e1e982ff2e6a03a675010689a16e7bde58f1bafb89e65f9453b6221937f99ee289f21a31beda026c0ed7e37e64b78b3328a741fb1f789f2149ada5934c49db10ffbeabca7eb5e7c25c645cd44e56133a384d3ad96609a225c4632ed18eab4b49503783cbc59c812517d317c075"}) 14:31:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "f6825c3b96f2a95e", "1b13ef57031d66042b5551e3f74542cd", "e16d7d3f", "1980b61a7c85bad7"}, 0x28) 14:31:25 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000002580)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/229, 0xe5}], 0x3, &(0x7f0000003980)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1, 0x0) 14:31:25 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:31:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x31, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2e, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f0000000480)) 14:31:25 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) 14:31:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "0ef7e4fa7717fe9c4e58aec41a58a6bd3cd40fabd7a7e3dd669d0713ee1080044ba7c46fcc97f93e8b41c80736cfcda8612d7e62bce1d0e4f00466227d6653dd", "0b0c3245bf42a507fa8c81ca904fc44ea037dfdc79c628fa1589dd222892d37f"}) 14:31:25 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x8, 0x0, 0x10) 14:31:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x101001, 0x0) 14:31:25 executing program 2: openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000001a80)) 14:31:25 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:31:25 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000380)=""/161, 0x37, 0xa1, 0x1}, 0x20) 14:31:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000008ba68d"], 0x94}}, 0x0) 14:31:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)) 14:31:26 executing program 2: openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000001a80)) 14:31:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001280)={&(0x7f00000011c0), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0xd, 0x4, 0x801}, 0x14}}, 0x0) 14:31:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x4, 0x20000}, 0x40) 14:31:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0xe, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x32c, 0xffffffff, 0x270, 0x270, 0x35c, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) 14:31:26 executing program 2: openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000001a80)) 14:31:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@generic={0x6, 0x0, 0x0, 0x8000}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:31:26 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 14:31:26 executing program 2: openat$rtc(0xffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000001a80)) 14:31:26 executing program 0: process_vm_writev(0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0) 14:31:26 executing program 3: clock_gettime(0x2c3e093aa4401e01, 0x0) 14:31:26 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) 14:31:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x400000, 0x2, 0x14, 0x1}, 0x40) 14:31:26 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:31:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000), 0x4) 14:31:26 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 14:31:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:31:26 executing program 3: socket(0x0, 0x106, 0x0) 14:31:26 executing program 2: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000000240), &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) 14:31:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0)='NET_DM\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:31:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x400000, 0x2, 0x14, 0x1}, 0x40) 14:31:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:31:26 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc, 0x0, "ea20d3e5"}, &(0x7f00000000c0), 0x0) 14:31:26 executing program 2: connect$caif(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x5a4b, &(0x7f0000000040)={0x0, 0x472a}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 14:31:26 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x1, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 14:31:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:31:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x400000, 0x2, 0x14, 0x1}, 0x40) 14:31:27 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0xf, 0x0, 0x0) 14:31:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x5, 0x4c8}, 0x40) 14:31:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0xc00) 14:31:27 executing program 2: mknodat(0xffffffffffffffff, 0x0, 0x4000, 0x0) 14:31:27 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 14:31:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) 14:31:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x400000, 0x2, 0x14, 0x1}, 0x40) 14:31:27 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.opaque\x00', &(0x7f0000000580)='y\x00', 0x2, 0x0) 14:31:27 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 14:31:27 executing program 2: openat$vcs(0xffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x200000, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 14:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0xf0ffffff}, 0x0) 14:31:27 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.opaque\x00', &(0x7f0000000580)='y\x00', 0x8, 0x0) 14:31:27 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x5b1002, 0x0) syz_io_uring_setup(0x5a67, &(0x7f0000000480)={0x0, 0xf67, 0x2, 0x0, 0x290, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, &(0x7f0000000580)="4dba5056d9ab573010707a881d8ae5527d1c954a09e6356f3b5a2201e0603297c52aa35117e035fe728c22b0080c82c23bd549b33cc85788d7ada67c28db0c4f2af39f38d8efd29231b4bfac69062f1cea20ccd17422", 0x8, 0x0, 0x0, {0x1}}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 14:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x2}, 0x0) 14:31:27 executing program 0: io_uring_setup(0x2458b, &(0x7f0000000000)) [ 380.456972][T13506] ================================================================== [ 380.470742][T13506] BUG: KASAN: use-after-free in __cpuhp_state_remove_instance+0x58b/0x5b0 14:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 380.486423][T13506] Read of size 8 at addr ffff888012deb498 by task syz-executor.1/13506 14:31:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x4}, 0x40) [ 380.513305][T13506] [ 380.517366][T13506] CPU: 0 PID: 13506 Comm: syz-executor.1 Not tainted 5.12.0-rc1-syzkaller #0 [ 380.528835][T13506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 380.541571][T13506] Call Trace: [ 380.546012][T13506] dump_stack+0xfa/0x151 [ 380.552029][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 380.561252][T13506] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 380.571098][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 380.580879][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 380.590213][T13506] kasan_report.cold+0x7c/0xd8 [ 380.596600][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 380.605564][T13506] __cpuhp_state_remove_instance+0x58b/0x5b0 [ 380.613089][T13506] io_wq_create+0x6ca/0xbf0 [ 380.619571][T13506] io_uring_alloc_task_context+0x1bf/0x6a0 [ 380.627063][T13506] ? io_req_caches_free.constprop.0+0x4d0/0x4d0 [ 380.636232][T13506] ? io_issue_sqe+0x4f00/0x4f00 [ 380.643215][T13506] ? io_async_find_and_cancel+0x2f0/0x2f0 [ 380.650993][T13506] io_uring_setup+0x1dcb/0x2be0 [ 380.658458][T13506] ? io_async_buf_func+0x720/0x720 [ 380.665340][T13506] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 380.674218][T13506] __do_fast_syscall_32+0x56/0x80 [ 380.680739][T13506] do_fast_syscall_32+0x2f/0x70 [ 380.687223][T13506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 380.695619][T13506] RIP: 0023:0xf7f09549 [ 380.701240][T13506] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 380.729673][T13506] RSP: 002b:00000000f55035ac EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 380.739692][T13506] RAX: ffffffffffffffda RBX: 0000000000005a67 RCX: 0000000020000480 [ 380.750056][T13506] RDX: 00000000f5503670 RSI: 000000000816c000 RDI: 0000000020ffe000 [ 380.759532][T13506] RBP: 0000000020000540 R08: 0000000000000000 R09: 0000000000000000 [ 380.768597][T13506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 380.777280][T13506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.787693][T13506] [ 380.790589][T13506] Allocated by task 13506: [ 380.796093][T13506] kasan_save_stack+0x1b/0x40 [ 380.801643][T13506] __kasan_kmalloc+0x99/0xc0 [ 380.807155][T13506] io_wq_create+0xc0/0xbf0 [ 380.813307][T13506] io_uring_alloc_task_context+0x1bf/0x6a0 [ 380.820604][T13506] io_uring_setup+0x1dcb/0x2be0 [ 380.827382][T13506] __do_fast_syscall_32+0x56/0x80 [ 380.833577][T13506] do_fast_syscall_32+0x2f/0x70 [ 380.839917][T13506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 380.847981][T13506] [ 380.850998][T13506] Freed by task 13506: [ 380.856956][T13506] kasan_save_stack+0x1b/0x40 [ 380.863139][T13506] kasan_set_track+0x1c/0x30 [ 380.868855][T13506] kasan_set_free_info+0x20/0x30 [ 380.874628][T13506] __kasan_slab_free+0xf5/0x130 [ 380.881290][T13506] slab_free_freelist_hook+0x72/0x1b0 [ 380.887608][T13506] kfree+0xe5/0x7b0 [ 380.892406][T13506] io_wq_put+0x4d0/0x6d0 [ 380.897477][T13506] io_wq_create+0x92d/0xbf0 [ 380.903508][T13506] io_uring_alloc_task_context+0x1bf/0x6a0 [ 380.910811][T13506] io_uring_setup+0x1dcb/0x2be0 [ 380.917173][T13506] __do_fast_syscall_32+0x56/0x80 [ 380.923246][T13506] do_fast_syscall_32+0x2f/0x70 [ 380.929314][T13506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 380.938575][T13506] [ 380.941803][T13506] Last potentially related work creation: [ 380.949598][T13506] kasan_save_stack+0x1b/0x40 [ 380.956552][T13506] kasan_record_aux_stack+0xe5/0x110 [ 380.963232][T13506] insert_work+0x48/0x370 [ 380.968365][T13506] __queue_work+0x5c1/0xf00 [ 380.974945][T13506] queue_work_on+0xae/0xc0 [ 380.980525][T13506] call_usermodehelper_exec+0x1f0/0x4c0 [ 380.988022][T13506] kobject_uevent_env+0xf9f/0x1680 [ 380.995704][T13506] device_add+0xb78/0x1db0 [ 381.001904][T13506] usb_new_device.cold+0x721/0x1058 [ 381.007777][T13506] hub_event+0x2357/0x4320 [ 381.012817][T13506] process_one_work+0x98d/0x1600 [ 381.018427][T13506] worker_thread+0x64c/0x1120 [ 381.023560][T13506] kthread+0x3b1/0x4a0 [ 381.027999][T13506] ret_from_fork+0x1f/0x30 [ 381.032881][T13506] [ 381.035348][T13506] Second to last potentially related work creation: [ 381.042668][T13506] kasan_save_stack+0x1b/0x40 [ 381.047734][T13506] kasan_record_aux_stack+0xe5/0x110 [ 381.053771][T13506] insert_work+0x48/0x370 [ 381.058470][T13506] __queue_work+0x5c1/0xf00 [ 381.063378][T13506] queue_work_on+0xae/0xc0 [ 381.068362][T13506] call_usermodehelper_exec+0x1f0/0x4c0 [ 381.075221][T13506] kobject_uevent_env+0xf9f/0x1680 [ 381.081931][T13506] device_del+0x7eb/0xd40 [ 381.087992][T13506] usb_disable_device+0x35b/0x7b0 [ 381.095685][T13506] usb_disconnect.cold+0x27d/0x791 [ 381.103514][T13506] hub_event+0x1c9c/0x4320 [ 381.109810][T13506] process_one_work+0x98d/0x1600 [ 381.115435][T13506] worker_thread+0x64c/0x1120 [ 381.121487][T13506] kthread+0x3b1/0x4a0 [ 381.126179][T13506] ret_from_fork+0x1f/0x30 [ 381.132079][T13506] [ 381.135624][T13506] The buggy address belongs to the object at ffff888012deb400 [ 381.135624][T13506] which belongs to the cache kmalloc-192 of size 192 [ 381.155296][T13506] The buggy address is located 152 bytes inside of [ 381.155296][T13506] 192-byte region [ffff888012deb400, ffff888012deb4c0) [ 381.170312][T13506] The buggy address belongs to the page: [ 381.176565][T13506] page:000000003075a184 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12deb [ 381.190090][T13506] flags: 0xfff00000000200(slab) [ 381.196850][T13506] raw: 00fff00000000200 ffffea0000672c40 0000000c0000000c ffff888010842a00 [ 381.207613][T13506] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 381.218818][T13506] page dumped because: kasan: bad access detected [ 381.227137][T13506] [ 381.230365][T13506] Memory state around the buggy address: [ 381.238089][T13506] ffff888012deb380: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 381.249036][T13506] ffff888012deb400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 381.260010][T13506] >ffff888012deb480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 381.269284][T13506] ^ [ 381.275408][T13506] ffff888012deb500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 381.286048][T13506] ffff888012deb580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 381.297518][T13506] ================================================================== [ 381.307616][T13506] Disabling lock debugging due to kernel taint [ 381.318824][T13506] Kernel panic - not syncing: panic_on_warn set ... [ 381.326500][T13506] CPU: 2 PID: 13506 Comm: syz-executor.1 Tainted: G B 5.12.0-rc1-syzkaller #0 [ 381.337352][T13506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 381.347287][T13506] Call Trace: [ 381.350962][T13506] dump_stack+0xfa/0x151 [ 381.355628][T13506] panic+0x306/0x73d [ 381.360003][T13506] ? __warn_printk+0xf3/0xf3 [ 381.364991][T13506] ? preempt_schedule_common+0x59/0xc0 [ 381.371107][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 381.378711][T13506] ? preempt_schedule_thunk+0x16/0x18 [ 381.385707][T13506] ? trace_hardirqs_on+0x38/0x1c0 [ 381.392099][T13506] ? trace_hardirqs_on+0x51/0x1c0 [ 381.397812][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 381.405817][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 381.412425][T13506] end_report.cold+0x5a/0x5a [ 381.417557][T13506] kasan_report.cold+0x6a/0xd8 [ 381.424215][T13506] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 381.432294][T13506] __cpuhp_state_remove_instance+0x58b/0x5b0 [ 381.439538][T13506] io_wq_create+0x6ca/0xbf0 [ 381.445459][T13506] io_uring_alloc_task_context+0x1bf/0x6a0 [ 381.452312][T13506] ? io_req_caches_free.constprop.0+0x4d0/0x4d0 [ 381.459910][T13506] ? io_issue_sqe+0x4f00/0x4f00 [ 381.465710][T13506] ? io_async_find_and_cancel+0x2f0/0x2f0 [ 381.471816][T13506] io_uring_setup+0x1dcb/0x2be0 [ 381.477451][T13506] ? io_async_buf_func+0x720/0x720 [ 381.484175][T13506] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 381.491378][T13506] __do_fast_syscall_32+0x56/0x80 [ 381.496979][T13506] do_fast_syscall_32+0x2f/0x70 [ 381.503651][T13506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.511457][T13506] RIP: 0023:0xf7f09549 [ 381.516835][T13506] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 381.540839][T13506] RSP: 002b:00000000f55035ac EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 381.550904][T13506] RAX: ffffffffffffffda RBX: 0000000000005a67 RCX: 0000000020000480 [ 381.560371][T13506] RDX: 00000000f5503670 RSI: 000000000816c000 RDI: 0000000020ffe000 [ 381.569905][T13506] RBP: 0000000020000540 R08: 0000000000000000 R09: 0000000000000000 [ 381.579003][T13506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 381.588814][T13506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.601231][T13506] Dumping ftrace buffer: [ 381.606170][T13506] (ftrace buffer empty) [ 381.611914][T13506] Kernel Offset: disabled [ 381.616921][T13506] Rebooting in 1 seconds.. [ 382.640139][T13506] ACPI MEMORY or I/O RESET_REG. Connection to localhost closed by remote host. VM DIAGNOSIS: 14:31:28 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff841b4521 RDI=ffffffff9011a2e0 RBP=ffffffff9011a2a0 RSP=ffffc900044bf7c8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff841b4512 R11=000000000000001f R12=0000000000000000 R13=0000000000000032 R14=ffffffff9011a2a0 R15=dffffc0000000000 RIP=ffffffff841b454a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f54e2db0 CR3=0000000018a15000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000052 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000046 RCX=ffffc90000d678b8 RDX=1ffff110027664a8 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffffff89bf46c0 RSP=ffffc90000d67838 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=ffffffff896b9140 R14=ffff888013b32548 R15=ffff888013b31bc0 RIP=ffffffff8902e48d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe708d3e8c0 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000030421000 CR3=0000000015d2a000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6d616e002f002f70756f7267632f7366 XMM01=0000657079743e2d780073257325002f XMM02=ffff0f0e0d0c0b0a0908070605040302 XMM03=00000000000000000000006d616e002f XMM04=00000000000000000000000000000073 XMM05=ffffffffffffffffffff00000000ff00 XMM06=0000000100000000000055bea4ba9520 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=64641b8363828f3c642c302534322120 XMM10=6464646464646445646431dac0dd6455 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=1ffff92000c07f5c RCX=0000000000000000 RDX=ffff88801bb11bc0 RSI=ffffffff8167f742 RDI=0000000000000003 RBP=ffffc9000603fb98 RSP=ffffc9000603fac0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8167f769 R11=0000000000000000 R12=ffff88802cc361c0 R13=0000000000000001 R14=0000000000000003 R15=ffffed1005986c39 RIP=ffffffff8167f744 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000816dacc CR3=0000000066c4c000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=00000050000000000000000100000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000001 RBX=ffffffff8f4525c0 RCX=ffffffff8158c093 RDX=1ffff110025b8131 RSI=0000000000000001 RDI=ffffffff8f4525d8 RBP=ffff888012dc0990 RSP=ffffc90000da7c28 R8 =0000000000000000 R9 =ffffffff8fab6887 R10=fffffbfff1f56d10 R11=0000000000000001 R12=ffff888012dc0000 R13=dffffc0000000000 R14=0000000000004550 R15=0000000000000001 RIP=ffffffff8158b6b6 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cd00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000975eefc CR3=0000000070d1b000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000052 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000