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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x0, {0xc25a}}, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x7, {0x0, 0x2, 0x0, 0x0, 0x9, 0x7, {0x0, 0x3, 0x10000, 0x0, 0x0, 0x81, 0x4, 0x1ff, 0x7ff, 0x1000, 0xffffffff, 0xee01, 0xffffffffffffffff, 0xde}}}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x0, 0x0, {0x1, 0x0, 0x0, 0xe}}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c80)="425c2f64620f9595eb88cc4143024939e71eb7f4c33eb1dc98fa2cbff5eb1fe0ec714b9c69b533df93aa4ebfae05786164fdeca16cadd0bc865f3111de47d1210f0d736e899e41544a87a419876ebfc4d3e63211058130d270a2cdbe909819ae2087021a4167acc2a9e7552a5b123470ee15f82efa0c8308faa95bff6796121d9313d45afcb696f3e77081d210ef6820ddfa2a02414c6e05637fb45fce24d3f16514ac81146c3d912ef6d4e9adec48a827a49113cfcfba6a9fb7c843ebb8b1b27715b3b6bb5fa1f7679cd35ad3fb5c73fba65583f5e1cec8d1cd86108a36aed286107635cbb705d073bcac1597a3e53fcd0e7b04ff31b5dd90f2e9329d4de7e34b059e7b212354d58909750f5033204ccbcd49850088ff8a27ed875e63e2e67255995683174d09114b7185c8bf6de6cdd815706219438688cc9cb3c6791557d78abc03870bcebb343a11ef35536b73d81e72d53ec96b01c22f903d9576762353b996cb0e19c26174f01c876285bae67cba71c09eb76c80d8463e00d59a5c2fde005ea727f17f9b6d6ee6bc4bc060dc20931aebaaa1685710c493d5ae295e840c3d29534ef42249927df4c8fb8fa7360a75185de3283007d7987b84763f7c501bfa14866abe2b092c18632aea87c1e11d2ca6c76f131d29a5e2eb5928e0c02e070150e72c48e0e312cea49927988b0b1efec53f7443c4cf2ce0d6fc7a593fd92771ea3110465654a2d35747fe74161967e28e4aa11dd1de36b08d74cdc98b4f1cc1f904ca85018a48fe86836be99db5232b04f6bba27ce1cb2b6ca282eade4a32635388fb56afaafa581ddcd52b4669c675876e2dba39af9909e62e3722106cb5354ed6374e5e00ed4afbd28098c0af0a72718a8f4cca9ff96e1ddb7c4da59bd2ed050e2a53eb4b138294fdaedb12be94dcedff14d4c13b21cd9ff79a929182ec2e06897548e2bca29768ad5d1ce82358f36f3a58cf24f4ba344ab25894a955579277339f4ad4f2b1bfeea6df8873ed3f31f2428177413403d6736291819adf74310000c426aa10111663bd691749e00b022b532979b6e547918303684b6b7c7032aa4653e18155fd22b5c0a967a1e800cc03fd01df01c0f45a9c9b32b726c8907c96450500bec845d284e748c925fe4bc3177dfaac53ca5b1685960da1976f3b34a23ac172a74d5487d7823a26d01d1840de57882d0b8c3bec425079221329b4cb140290500e0f38a27ef57e6a435c38837fd3d7c04ee927dad15a36637f3204a3c8f4a2dc56dcea6bf3e59bea347274e85e68286eda7318b0365b77c333ea4950e0750ae28ff67533bcd44b05056aa05f034552e04aa4ec33d5fe23d33f3bdceebf7d541b3098e5d6bcad38137a2510c95215ea0bcbac39efbfc4403cb752ee9dd819340012afa2e993bf23f25dba728e1caba12c7ebad5a4eb12e7c89c561e345579484bc249633b5a7e930f8276f289908d6f83e858ee79a62bff26b7bde215536ebb2de82ed957848623f49844f436440658232a64ab302cacc808f72dff9bab43c5da906698ffb0ac2e99acb56e0173167e8642d32d2b8352db7afff88e0272ef9ede81ae60923441c58f3c7a0c4315b520612f45c0c6164cbf09ba601e31874a58d84a97e8ae5d3d43d318a25e099983971fbe2108560e76d0793466d6c77059bfd719d5cc358c0c86bd2dfa60d0bf0d2f449128ff5c61f4f75b72bb9fee363b93b1e037eee7055596e4824aae4d794eca1fba2a0703b138fbddae4d1316d77d69d657df2fcded6e9f53fa4b2edc9dededf63c347c42e12e51b5744ae8781891f383e920523e51492ed0ebf4498e6eae486c407c7dadeeb3123c65d90869bc2fd844769a17dc1f85b37314f7eed558d4e5fc61ec054cba1607bdd30d75f536082c03343b7a0eee96c412e9022f2befd4bc7cc0d7f71c0318f89a161de81948c6f8ffdc40f6e3eb2db97d6200c492ff74ce9f9f7508fc2d66f8ec58ccf7a2881bb6de29751844ad5e15e508052435ae82f6aca2a5ad6d446bdfdb4354d700445bf63e6c12a9dfd8489ca0964da7b41ef886ca6354c20f85062f9ae7e2c574d34f5e3e54cacb7e52df5f3bb8aa3f1ec20dfbe19b0812c0413bb8151687ee76421c2b21fba495fbe84d232f502236717effec444a6f8f66286432d33d449c0e51a8cf7decb26839162c34571f15a9ecbe6a723d27d553273c741c6e0cc8e3080cc3c9790525533a5b27c68d6275a25b7fa63aa4f0af89d7a05fc26bc50294c7ef8dd5f8ab03d6980bdd086578469c92a0d734aabd09df6621d65e6068073685a5371f7fc52313519a96287a1008a679a7b749e058cab99c0eeb54713a45161700bba1b7cd78cd8d82505b91304d033ba9e13fe042d5a644f176670c1208a1cf79735c86123ba55e1a73048c91b1554b17c2e239129a3d2d32b4c29c99254f19a3bdd60879c3e6f6514a966b14f325db29f3b08e831490e1cb11e9199bd6dbc7691be6467884b670fe850ed1b8749088fad93be94303faa371b9c6579626e9a6cb3ed7051916a51c72af2260cd9d155b1c81ec60a6ec0ec92d0e88a613bf03df28511c537516bc587dd3589fb9ba165d56d6e284a30d280473560475db758b7ad9e87d9183207c774640b2bdb6f4de32b4dc83122d2745b8c65d927caf60bfb424945b1ecb0f4831af4fa64a55b295a533eea460fc43d10105add38d54187162a880fbc07a70a7d922c15e6868291a6eece6b702a4d2c587a38a0d2f9fa6423a43d6e4731cbce395dab589500f423390a336f01d5d0a57a976120d1aa979ca9d110fc2be79087d295beb31259d5db84f8d725d757e82c0135d4a36ee380c96aef7e0d2da039b593e40e0f6f11fbf0c8a495fc789ec26f2fbdbdd6052259075d4e3f118a7fbece3d3ec0e5a5da53ddb089f51083b5adb262b23a14a09429211e9aa7abf402b716b61a98d49405152dec6ed2433b85b87d7fe9335e96f27a731597982f7de28390811519686549712e70a7ac52dc7011286a5dc7913f001520230da835a70c495615ce4fbb5b291594d7d1f96d182f31f3784a6ccbeb21339baa168fd67aa854f7d2c29cb3b3502f774f109e324ec6f04484738e42c246afdf009fbc2de63057a6bd165abf085753b39e3127880a27dfb22056b3916f25845c7d9c8c3b6b540715cf2409f8d1e234ff272555bf01a8933a58b14af5d6c6ab375b80a2e292aee4b0f4264b8db673b3c473f8f36c014afaae04ab4a7ed09f9c08e85fea6e5dac592840c6fe069f1037adb8d97c62b2b41391a1687afaaf383f4577ec6765a82fe41d17776b90c5efd686e3bdd5b084355bb53367293a6e5172d1947e1d46aab3c12f7d583a207a2e4b72f2b33b56b3ae223dc7acb18ee1c7b81b8b24851cb46dea62ff854ffdae08d17ae1fb1c6e4005cd35f8e6a6da2c971953975ce3bea4799b077b458ff6c776c299711784b810bb7ae54f0822d4117ab8e714dd98675a70dec7c8e88eba1e318492fa5e67fd40c8a4a32322ef8279fe634f05d776d964cb1c52cd25511846ca4eeebfac76d23b2f8117261a0132ce13794b29bf2511b6b8a300cc74d7217c6968522629ec131cefdb3d3b2cd71e77a0e7d768a1574aadcd1933fbb003ef8fc4b2d5132bbeec343e41d3bfb1e7dfb136ace18ed9c5984a533be627501b9d448503b44e5f123ecd804be552ec1ada7456a9417651baf350cdfaffa93166984c5a423b863a6a85e56d12e0ed3b2e3f42c325a8c131d4b5c6727c5f6c8892576935a568a5804518c262204d2529a9e091c739f00589971071071c834091bb4aef31c4f5b269901f446ce70ae0bea416e931f9d8311937029aa44c0c0a6860882d9299398ec13064e76ba939158089bdca3361b7a092940ef99a2eca7172de4aab8f933b10ff449f0896be94ad29f13c497a65f9054f72f17a902763d9b2ddc492fd8ab85bb7e163d8b70d27845ac7a9782c3878f1e247d2436486984395dbdf75db647608802961627d8f398aaf517305141120619f671a303b441107b9aac9b1e625d416d498c730dd8d84a77245f263ffbc6f44e141b4dda231301b9e79c15e281b2d3a79bdcc3e5b6c0f9ae3b04727e8633a8b6098b8323e8563a7db31cd4f8a70ee723d948779da041db7e783418f988b1d550ce5ed38b67f37b480ba7fd0685e2daddb4a2b55dcbc5fea69cc299c52135973cfb04ad3058c64632aef1e3534b4ec9b6c6ffab0bcd213a8bbf7525fd5ae245e13dde4d2c1de98ce658e27c69bae43a2bd00e414c6c027a1285cfae1c4e32a9804bde908939e39da2d10b8a30c13d71089f793ace585766c0c96ef4f5bd4af95f42f4bd4b77ec6100314d5eafccf32c769df989af817b9bb331855ddd91a6a4d8f599e2c8ed05c6edbc7983d43f2d0ccd8719249c1527a2b08fc68ed3b215f933be65f7fe3de5a097ea3c25bcc51e28921045e94b8df7c5ce2acf172360f73ce91b45b99479f57bfaed3400bdabd76664a4cccf6841245159faae2f3fc7bffb837d5eeeaa5c03b6dd384c7c6935cc97c673ba37d74abc223cf5b2ec689a9c47f58de9ae940cc559151021883ee8d9993de5595a7e5e6699f816a31e16add862e6022266d2d1c4e9c3b035087f54e53a4a32ca056f30ef3b278561fff008ba3dd49dd81eb314a00b96c633c3ca6ca95943813f255ffae8ef87e4409faace444f0579c9237f8f18fdedc84c481d8856360c66906a77df0845699c0df194cb46fd55b78d922c9b2893c897dc3e561143b59921e6224eb137d8660181102934d08104fc9ec2271252c3d08dd9f6677e38d0784afcf068d0b52a4c1181bee943553c4d10357b32b41130238c212cce6bc1803f7f326d918811a070111d8542cfb1f15cd548d083a951a0eb0696cc929d082d4410f06bc683a67bdb3d5e8c772f291aabe1c1955aeb4c750ad90a956e1a6e43e3d251cf64550674951982a00e719190a2c9697d43d599e44d15eb9cc52494fc3c2f79c00714ad4261f7c92f9031293509a905556c63ac3747ce836884d2e398f1765335ea781347a8595ff8e50003e655472e707d25401b9d79c893ebf897fa150424d4f0a0c9a3bc62ed49a300ce3774ebb4bd87616cef9d4c1877ab780572cd63f8dafe2e163b189845f88c89bbc30178b1705c314fdaaa718cb2d267a5d9217e376d1b7e79138c3f81cfb4b17898136c0747675431b65c9a6f318adc6fccda469ae5fdad50c462a8e9ffbe740f9976d862fa5a974fff5dea95f1c56fdc7f7876fae5e5aa4c0230b294697fa7963ceca908eea9ac243d6517621a529558bc2bf0cb0d2252b11ba0daf12ef66657575f298be5485ad00062c9193f4be5d8f5356e98d1bf6826f3defb442a64852018799a1d231d0bcb8b7aae7433655cc8f0a9c4e0dda02886e92dfabbec022019d926db25e841b0d12857cae19de1be9941ccaea2adcee4bf39314198df41c35b7efc386af7a6b48a8d54f26a6d9d883b196a3ef023ee779d9374fe4b088066b5d90fa582abee9e3aad014b5c106536e2fe44409d106a4520d7bfea11368016b6aa52eaa1b6fc337c66dbd8879f580ae884ffa3d67f26709a9b52698b04fcd0d9c58367d8c6812641195c3ee74011012aa9ba5cfbb1ac926fb500defbbf2695f1e17c163921f8386d1d900aa8fbe8b8780e86e99a70bf5ed6704fe6d54b5ea7d2a5cc606cfdc23482d5a7c107bf99b7e697d791961c6e5afb41127f4f5c0ffdd734cb7d3e1c7b100911f974c8d7c86db365296a05e4a7c386a6c8d83beb638e7774d26a593bc9ec9e90c3388f2a077164fcab77aa8a3d47246642d96af00f734e3b0a352ce68268c80c4f1cdd5e04d5bf97ae76f9710b53f7ec851e21fb9ec7be44c36f945c869aaee462f866cfda63ffa65062da6c2402e6e20661444110681d384573b01a36ab60be50887efc2e1811ccae76bf9257c6d739c9c9222a9f27425c6fb3615ee1936037e76ae0377c0242a7297c41d7f598615ab1a23773c9ccc52b216ccc58e2fb6d1a278c91cd26cb6f125fb48454a0714bfa5c11d95cad60508b7a8e3101c5f115330bbf176028ce73aceb66466aab12f9e57e90c1c534a9515d703a8bf1b4be59582ba77114cbeb7d4faac56324c7c71339c38ede477f5ea99f0e3158ae90cb01ebbd2bf38d81bb4ba2659d787c8d7a073e6bb46785905ec8c325375df3e40d4886305c19b6d5e76883aaa307eb4ea95ca708934741e424ee3931cc9a167dd6de719af951875767b76708a34d34850d83dcde1de469f0f43d2582754b1c1cf52b3dade7ff2500a9aae9e6e8217ffff6e592ffe867bfc08a970e05196d6547e1542b2b3436c0b3da40ac9b5fd64fd57e26d4363273609d32dc524dab2730762f4563a50db29daaacca096cbe7d379d03d22d0538c211e4dd75c1fc006b80871cd826d3e4b1316796e44f2f510e58725f8d679c97c314310294f713c42dc791ec2b562465d0d2c75e520cba6beb388424735a37266697aabccdf965e3e75b5c35e5a3436c89c6fff76d2f89a8a2180d673c51d29376523553601803d19b3ab0104faf007274003d77f6a054bc53cb4de04f5a067fb829b3ac1c3401e9c082fc57bb551cd06b0faf978917a337b141da037ca74ad6e5b415cfdb8ad262df1721249e46156e47ebda55f1e99c2cff8864415c6d1717d70f994ee4b51f13cea4e8c80234aedd476b9580214684ff8b79b83ecdda4a4d2fd588711f031c2fbc5de9846388cc9d024ec49cd92cb528174b325c124bc4ea4fc206c7e4107d1cd9b3e3fec223b58335f12af5aa2438bb92c2475e55a1f0f50e5058aaf2540290b0efebd29674d27dce401674a9bd73559c225ff246dcf95cd99a9f8c89747886c4ce33f23e9be6c8f48d6219cf2caeea3787cca72f41b51dc937265083e8bdbaaa6709229a4811e9f49f20a9ff4c7e493c464caaf6ce3fc237a8aa8ed466dae0ae088aa6397b027794841530fcc6f9650d874a10917fe3fa17ea6e58379849fce5410ddcef3ad23e64676f617140274ade6c92296209fb7cf4d849a3181720f91fe496acc88cc931cdadf601d28e5826ff1d4d446f0bc8f51f2b8f84b952121e15084f97b068d39bd4873c3fd928a76a64426b6d6141a6b006f34202c25ba2004434415e9abf33c4104f6cb0b1cbf89e9cd9a9c890c20c1c43f67bc204af3ea620daa49b8a81d526b6c12b99568db4d9e0856d11a7cda745de6b73f2c6f6699b851251a556eceaabf983466a96f532f5be62d2061f43d3a9dad86bd8dbcb2d196abfa3a4ce0325664f30cd0b9fb339cc121dc6968a37dfd5fd25a1b4a11311ac11cd3377001a331094ff06fc9b8ed2c619322cfd0170a1680e3e41e22a62aae1c069bc2fb4d4eb6dc017e1db88c041ec14f3a94a2dc1ce499099bbd0797512c2858f7de1d8637b6f7c314f40446dd374c56cc4e506ce0c825a815a1336d47719a9fc74089a8bdb3305cec2199c5d8ac360f00ccc3ffb3eb950ea5617c9ac8a8681866609b476b0ee9ce14834eb5e88a189a8759ecbb1d70bd3a99e5065d0dfc74384a1acfc3fa05387d9769d0889afc91fd9187175d5cf05fb3e334b9d73bd7137c90ad09a746aaa94a2084c1f7c1e81e7b86f63f01ad63a6eff4b2a7a14120ca9a1609429d4c7099b05ce16fd1387bfdbb21ef946bff934b7a7dbc060a244eabbfdf05d0b5cb4ad1614994b721468aece71c07954f9760cab348b9071131596954c246a98e73996f67158100ed84ce2688d11ec7069f1b4a5e76765c3467aec531e1644923eabc2e8b142ba1df8bf4e08d13973b01825b31826c024a71f4e827c4f13fd600845a0066fb256d92f3985a0f30c06877d85f31d7327fab1e5596f056eccfb061139a220c04cc858f1f769f213afc912aff2a4c7e685604b0b58a7851f543d2b95e2a4b9caaa70dfbef7dee490c911b8c435bf7e175d30f01ba8c4d26f71c8da4970a48c387e0c7344dd22b3a2376b124125719dd7a4cba8c17d63b52816092324dfe689dbaffcf673b3afe5536af15735f00a0017c7d2c63bb9a8997f4da97b1be5aff6e341314e147c2470290f972ab3a2921989076041dbb0eec01f1616663fa57090f19e2286a309d4f8675243ae6c91146e614933db3bf2b7a20c31dfef96d040e573f20718fd128d091ab5a07b7113a8e88a66e4ce2fa4d01c3c493a8ee329bab21e235bb27ae567b4a84d146e027154df4752ddb88410f9ee5c22c1da73eb460bff4eafbaf2d16d63afb8fabdd55aca3cdb90c53e6ab47cf970f5872c8d1f6fd61626c9ce1f7f1e144a055b0c37183d2513dde14457d7a0db5999639d94f83a8e4030f98d7adf08b5de3bb0c41902c08fe34f48b8feca5fa81aabebe2c330c152e50b902a3063060b2ac7e2bbfa2fb290272c15ccd53af63387006631f78878e476b4cf5c7505d982b2f1c37e4b21e1ee292edea50b85b3ee7afaa90c955d363522d626dc605d97a6308307313d79146fdb1c193699b0b37559fc7c1875762d193d77474762fbcd69c005789ee8cb87e8c03352aa5ce7cd8af978c1fd2f1e29bd81d5d8f837dd7242dcb59e3404f0d4ee3eaf946fc8107ab4d913e6fca89968c5375761b505677986ff48932acc28912d726412f535de258c79f34b386898437b7f96aebdfdb9bd4e33e4a59f51403796963bcde81ca1fb6e2847666451d81eadd76ab7107edc7893e75f21e1228815aeb53be2dfe6eae47781da42c2fdbc2380dbaba839af68bd7357e3be9ad567f7a7d846579b82d8e8256068f2789e9fe87d3b980bd3c3b41f86fc98b82b66b7069041a7a5ea0439d748f37bcb0deeefad1a6c36a222832d395625e60deb3106fa0edaed7ee859c312c0bd3aa72b102402ef1fd7128cea489506df4b53b109807644e0103d82010b954db76981938497c16b2af28167278157f69991a2749fc238b3c4e217b4a9259e9258f21cdeda7580c58c613538799c09e2071dc1538ebc07c90f6b339da8bc0985b8df372afb0d0d04207a7d1007c2e840421a6ebc4c1180cde26365dd62ced6f9986d7289c90bf356baf2ee47ce8456a4bb3cb669d6a6b766ffb5233b2178cbd4b6a83a94cd699315fd65f6d5b1544d93307b97171dc8f8ff11a0e913ed2c612d68df104bba443e0ecea114771aa1ec322abc742a90dbc4fc5b1cdd63ab648f782060354d23a14647c03b341fca0defb684a43fe410af7e9069b4efa0ede2d6530110c8d01bf359e01a6a17af4b5fcf3d879ff5a15ac3b42a1b35a4e8c7e07c1c07467c4b3a8264edf9b06cb388da8d483e7ae7ccb56686eb9908978decda6fd2f0439d38d1d6f85a89ebbe771240ccce1660235958eee45be2a597cee92c1263de833536c9bbd5454156b396987525c98a307e20f583f6ce387325daf7d44de1b803179edb76ce02a3bb5c9cbad410b2ae36a276799dfa31054f62b658493830b7a2395e023e6befbe606a28a29afecb1d49d306bc5e97067a0f5a2bb3d7e1c7877bb400b060447896c05ee7ccab7a94110e7f628cf1dbd5499b8a3118160f147a9020c602af889c66122d5b4023f776d7414158d5394ffc83a21b1b09af847191c6673da03330593c12ee9e08aa552d37bfab9e38129b312671059987348530a67a1793414340efc22709689ce66779b5bf71e3024112a6949e9b70ec5f2381c30a88d6bc6280f2213c2b1bbb253194b9fe2ecf3ecbe4d24708d3183b24018a08bd8b347d5bde0432f53282177e32f2af32343fb740ffb6557fd9b4a12ec3dc320cc403b8b6ee20c1bada4c5b4fcbe6735a77b760132992e4ba6f05c2586769a5cb157cecf96286923b88db53622b404d79f5c71b0a087b5af1fd13e4ac20b7ab5573ce13ca63b780f71f61ee9c1723e1f5370111302e26dbfb9dc0b5a3a412028497486e804795c738e359b66fbacb5130f9f66cb91588518a4e4ed30bf8ae1f11d50ec1684e4d617977cd6f5743b4ed28de8405993342fa2625dcca6ad8be0c480b65e2762169d33be8203b7366afec1aa4a76f053f9b0b9f8ab4cc2b5f87d9ea0d95854888d3e1c8bd657ddc16a72503ef98863af3eaa710dc18fd917932a582ce49c397abfe3d5eb71e780b628929fe5fe6f73185f939d6ddfa62939b39382b7d6ec11b2df866c132628f2e7702571ad8796a3ea188295947c727cb22bc291093488d586db37da33281458f277dc9c9246d6ad054442c2a0a710765c60ac383b0be83f14f49d20d8896880a75aae82a7569510a999b2aa6d117363b7dcf26f9931277df33d1e137985895c6555349a4fb10e568b14de429ee3ca2ef9f726d8a8ffb35d8a8d3e8bcb2f1e9d2d716f7f318926c586ec85cbba52ba4511eca2fa1288ee44911c902590df28745feeacc8baa9856bd4b6b055d6c01364a88e1400de1a657f7a2a6ae38facbd8c4a236c91a43e2ced5440c76fde4c714014da76e8d4090ccb79430fc95afe5c353bfb1f25020065c5ec8d27042f83e52fd3c08034191a02938204721433e7ae0c90c50f9aa0f80afd3c1c19701311fc2b2af3b0cdff194dcea31c3c4547403ed5860dbba57e0d114722bb4bb50bc6ea64719303b55fda1c849d5873a5fac21ef3958753df7c267fe83a7a4c9acc229c54ce6a8b7ad2d2e20402a5a5505f22d670222f12a9db0f426a172188c513d5bb1fc2ffb1e5e20e70947ef44886c05419fce2fecec6252aa053d5303c5e6cf979d098a826c6bc22c5ccf10efc07c1d93c7bb7400bf67a33abf1370edc5a019c3952b57016e63d318189e5313a3e8b62370f015d9123a044d5f6c80f430fd87ced7d172c2489e28054a1d22a585eeca531e57b63ad04c114629fff98f5721727a509b11ccf9feb6027d7dc79c0d586333b2b9ad2823a7e900a668d42be7acf70ba63f51e63b064094c838a6a38a5467affbd85ad53efc7778cfd0d5d8d4a16d7195668b055d89a1a369c0716812726f347a09d0432e9b3bf5d24d430f5e17590fb58b7391a1ba6683822c7b0e65fc0e51583c4e3ec38f27986cc2c853b39dcc19f989bf4c02bde63e4d9354f0bbbed383ead87af9c542cb8bb85e8c1c6f92dd0ca765d8f2709c21d69b558726114d7c58a112b472ade2d41436f56b3b95929354cf458a9af9537a1a19f3e451255df8af89eb7ea0a56974b981caeb373d9125591210638364a2363926084068b1e3ee71a0aee769b66031955eb9e67e612a196ea43d21e6dcf9dbf68f3bc9fce86414f9bf4f86dd58a3960cc0c8e8ccf97a5a997d3a9aee36044e40f8490e8364e277d0cf48761a007ee80f690d441ca06e1b7bb1497fc8637f8c432f6400d26e838730c454177d567d8ffd013292e1ab0ab1c132b612d384bf3c642df39564529d923ad9c2dc6d3bb03b165744ed1210971cd00408775b1db42404839d858da827a0b971596479a3e28efab078480f41782d7aca0408b64ec2e494d48de6c67b1bb4cd46ffdb15ea3204205943f950d2d37741a488bb6c20db10f5546150c04088c0fa56f236b537aa47a0bc8c0b70a362b9a9abb9e69dfec6507e00700e74a442d3c42741fc4fe6b74c3c767a0b064e817a8b7a", 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xfc30) [ 686.387152][T22564] usb 2-1: string descriptor 0 read error: -71 [ 686.412020][T22566] usb 5-1: 0:2 : does not exist [ 686.468031][T22564] usb 2-1: USB disconnect, device number 3 [ 686.487667][T22566] usb 5-1: USB disconnect, device number 27 12:30:10 executing program 4: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "54ec"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:30:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/115, 0x73}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/84, 0x54}], 0x5}}], 0x2, 0x100, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x1000001bd) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 12:30:10 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x33fe0}}, 0x0) 12:30:10 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc47, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) read$alg(0xffffffffffffffff, &(0x7f0000004ac0)=""/4096, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007400)="e78e1b89001939c82a332d828638af962150692b8ea52ba0a4488f425cef2e4abb0a6c81d8729aa923e935059973fd45493f9e91293708b1f5a80a160f5db755465be8485d47b3d6cf1c15ac20e549035224009cef268fcfa2f97972d525d0a59ce2aeec30021f8c97a57644b963cf06ebedfcecc906bbeb440fd6142a3e18ac4693eda44eb60e30e38b4d29b42afde5e276d96775623813a6da4b326f60848103e726d760026b3a79364a16313657820b1b5dbe077826e2f5fafed546b51c2eba4503f2d9eacd57427ab8e1a28d0a5d51de84cc1c4aeb3c80186fd6d596a87fb657deaf4286b6f03d89a8de2ec271fc811d2d7e327e3635be9ecb43752c1322fd81f286f2e9635660d0c6ad88a0275ba9d4b87a6333f6d279b456b56ab686280babc4e27859462542167909f97132c78409b2a75783dbf5000b0911ca5561190e88914f67c15bed4e70c725469a23337af5b59f051cdf88a2b628ecfef06a97ac8ba220c9dea13baceffb17f277e4c8eb1b7de5afb5785ada9d32f96ea6d7441cef3671902bc3c4f55d2febba1d8c64d6433dabc598bcef4783fde1f451bdb18af9c4bc5d60bcb0dda0bc08c8a1c8f164e14a21691a82494a7ed8a41a62776a32760a052e55ae8497c30fe94154b4a6cbec9f110aceb4689c7025b3a4594876d9bec92ce58fed41cda7c5611e584dd692a105f75fbaf4577f2b916beb2d62fc253acf3a4e65f21b65da947127f9b80b139abd0aadc7aadbe78961a96db43e0aaf45b6798dbdac8f3fc223a95a12d9040c00abd9f155ce434c3dfc2448a2bfbbfeab5922059f3a04f66e72f5ef510e0fc03015652d29ca80fdd372da301b6d0bc1967eb5b93ee40abbd039ae25ae868be816b730c6f47e45833c32580720c29fd3579c55584a5e9b440fa3cc6c6cec2184bb8060a899dcb96c00733f487272d2bfbe8c9af2796f8c0c5d301ec73e5510d58b95b4e3ed305fa95613912d984764d313ce7a2388a71aeec1c39207ea6862582f63d40cea41f2936dd839275a01fb3ab991edc718ff97f3ea9ad9dda23e2becb2263e8e1ea3931b18d935c2a2da50beb87965facaf56e8dca41c2a243af6e1783f8d6b37448e81663afdb2643277350168c96f57a1eed569f6a043677128fe93312d3c378fa2ca8ae98f8400392905bebafee60a7460cccf41b2be6b99f40d82b2a8ba13cd4f9a2c1b2e72102730c90b3b7074e907f2b50c381fb7a587717df7910e2e8af115dbe1185a464abd69137adf82f890d1ac05bfd452cc939e747a986fef3d9333f5ea74e216d21ce85faa9150ae82204862a293425b9d96ca5edc8755e91b6d1011142344a2e0e31d5019c78ab5f928428dd4fa46e05091261337f50f87e2f9be281b720ba3239df2e85518fa0f4ffcfae3750c3589257b3bed73f776457868408471bf0cb8f2b9b53c824b16f839f4bce8133d721a1d68b933e3208dae2807c143fed656f5c251aaee2e42289272c61f9dfab254cf12fdbeaf360ef279665a9e2bb5e7b530f5d7fedeb4eb260f762b0bac7d46e10b6518dd9243161e20fa954fec6375d60075949b6c47ba86678f093583ad33733d9e1da0e86a64dbd64cef96b66b5b26deeafb963265d96f29d9f953f511fe1bbdfb63eb0e392e386e985585066fe58218ece89f5e5f202a90492133736cd194310be30dd462bbf7a3712ed8484fe9b0f55d547776683472b17d09bdbbce17ce26fdd95bdbe1753a8725410c9ab1981fd7525cbb2358a1ba650c88e3727915aed279f2500b241d2ef498ddc881b37c302a105ca867e95cb1256d0f51014a44b0f92cd80ab2954ba655371d0aa78d747694f3a1eef66510082fd6a28960201b0f877468e7d061148f695116e548d4d845f734b30d724acf1ddefaf6541d6a5f85430b19baad99e74f1ee160643d5e0ada3d3592bdd98ddaac7dcd99ec28b907920024a08b7cd48737e19ed397b6e9e8312591d094d5f9c32e3b2dfede6c20620b6a465c1494c5a6f69b5169ac1e8ffb8dafbe348ce0bce42d1e691cc641d5b1a8408486dc9ce111d8e4a41670ddaf87f016513323c6ef9e2c6c9c89118d448809689ae4d5e57df932913c6e1f89ace6620471bb427f46b1083327f6ed125a95fadc6af0d125bbc890f7f8407eddf75b2c80ef6241faac84cbb114d1407b2505c7ddc0daab74ef4f35dc927d1065348ee7a1dc4a38147a1001af7d799adfa1c464c72619b516fb74a7eb2994daa4d23bce331577413cf96b23cf664c0a5a451a517b6270a07169c10496373b7ac5cc7708880cc0564cf8b0df8903ae58777ad014f7a5eec6a10a0b78d4858eedeb0f100d5451cf9eb9cf0d19bab7be7192794ea75423508fcad4fc4c9485bc2a8443d5930132453ac97ffba67cc66d0619556106e2c88bd6cff6db1517b3b8f929c7bbb22dd51fe32447677967fdd99a1e1122b59e33f21b8e3bbb64695c334f7ce87b66e46431173bcedd131c9a80633177c8946d685cb97b9d7f1fa088acfd4cf7dcaee7c4fa5f2055e658ea292bc3ebaf8b9c3873ed46a4b694283cdffd298054e5fb2532485103a951f0a2d64038ee8cf2b5e57b38161999b4a726e07a045c77b19bc723e13d0dc8b5d9a4740d1743ba810e38357572755a286fbcad2eddcdd6753471c80ad899de2ae66195884cc51a7d6035500782fb989f0606961e45d5fbe165089984e53bb1023b5f870eff0e060ea771cd39afffde4e666ac1acf7466abf35ec1730c2da89f2cb378ad9d984e3d928ae2afce2d4a0cf0a97dd2aaa64143f9e3c85866554aaa348e2b1afe1b23159bbe6de608cc7ab8f59083b859073f64258577ec8c8055159f692583a9f6feee3d5ad4078c5ece2b568747636aee32cf5684291f54d766fca9d88bd4efed30ea02d336ea19730423edafd009a096363afa1ed6b97b42642d300c4c5f17a7e086e5e960a082dcf0cebe33d10f5c9d5c4ff0737a0bda76cda91e7cf1dcd9c6ef2729e06b7f506f8d669adc1f4e2db0eaee701fdaa77702efa15d9849ded99f2c39e53055c637fb7d913f788eeb5fd7144021f4c7f982bfd1b9a3e738030ede7aa50b88b225e9bd0a058fd54e451a3c149c441bce91e76996af20ddcb6cbf74c50bc3aa86cb7a22c9b9e890272f5af95fbec51256e7149db8580481e36359215343937342b4c276f601387ce719f8ae0c23ebe1db66d1a5bc4c53a10b6ad1809c2ada67ba7fe93acf1adee8c4e72bee33571e517f28b4245d899222ed18c50044433e830de78b5345184d25131b678b68ec0cdf24341d5dea7bb96c8d69ab81a96194de5ef7725efe1a74c6cf8056e62e96f52b2d72143fc9c2ff88dcd8427419e696c7f846a3934ebfa42607c1b1a944ba15a630107256cef2f43c6fdb8ce8a9a4b1f75eae12c26c32252b971b76dfed8cec3854dad772919c9c6cdc927a48a7409f79a7495b1b5b1b2c12efd849d65a93617ec6c6f6c54867a0d6161fba56e52580c77226b83c0b1cabeaafb9489ddb1953df2a33541804781f02e9abfbaca136c21b12ce17cd27a8b96ee2c8c0b8e069941d0b90077d8719b630edd60ad80ff69b07b47566ce89a3b2ffbbdbdf372c8f899bdac6ac91d9fccd57966280792bc5e100014d55ff314e3210f497be06443e2706dc743cd5fe79a6783f11368aa004aa7ac52d009716df0c3d25e671ebe6cee70ccaeb78c7749d839a49797655d46cf1c933b9d0e26a204947ec46c67444706bc0e64c1d0990f8972ffbf6afe193468d4b9049847679bba2c5460f72c323a3c387b1d9f177ef9c3f718aafc25766d3754dd8d7b7c74150cf6e7b392fd79798b3198481c028c579981deec89f38fe8474ccfe1735832be344bf2544cfa54455445a6fe929a8dd69b4f4c9895875d6c14aa8a6622fd2a944f0aeee498310edc32a8915948ee886cb90f172f1a63a5eebf24642f44d128317ef057507131f7554126a989cdefc7eaa807e6c7b4fa543ef390f6755e9764ac28df587f05be038f1d738e815eb0d5836d016734eb9124ad7b169bb9eeb32d737f68d9238bf43ae8ce586e097d2bde3698118a8f7670d15c036a18bb42548e1538548827568a9acf3bd70f1e8de2e6cfd423760b1470bb882f478a772a06321dd1daa4b628218cea025b180ada76ef232272f2ef1901b25b882217f2338ef9164630ff1e195f1ee5bfea2bfec16818941d8ac46bdad49bd2d5fac6027150ee7699f9fdfa071e3f3132aa4dd706d0476201fb39bb22c7849f64da30982ac95db02944b1040694601c3f99e837dd5c06f46b1cd4168912b518c3cd1d370b0e903b2dd7fcabbc801cebf69b90c39ba957a23ee0525305ef844f51c859151d8e91829952f37b5182bbe96cf6443bc6eeeee6ac476a1839dfd16fa0cea06ffe212b612a4b3de3407997bdef4bdf9c31c734c8e67e3649c11cf3a49939afb46665b6096693cf3872e949d9f5c11673845ff45afaa1cab02ee936f8ef4bfbe47e7107d9e0e37cf1fb88b49df89d0ede3489fddc8565cbc82ed231c781aebdf8145bd4eff6f4d15a0dc77e90cc44c0cf8ebad8d15feac886736695de025325c90cf81a1d389c4f30d32f2ba28ee46f97d31a5067f999b968f820529805fbbee62e7e7bf18e565c30d76501c0c7dfe7dfbf99c321a741ffad397cf1a7710d1753a4516103fb42c06704029c405a6c152939975629bd0cb476af4c685438c68d042bce679bee31449f5d5a34d89508b6fbafab552cd1e5eb9902aefec083f75c6728e1832de19b3bf25948ac14084227f95e868dd460417a5856f65856d2437b246d5a08a3b93ddeb77bb86234db42c36da43e406e015d5b7432c7284d7aec36751ae90c1d2a5320c06e3278547c7dcd4a95540464db5828689310263fb48446ed9161fd6d356e8957cc59baf02fefb82b13e2927cf1717447daef2381fad50013141cd00135e8121f011e35d1b50171a3bbe3b7ee40be9763a19eb75aea195b89ae153822429e4fe18a750a54e32df6895d0da19e747145754289b089e2dfd22b5ea8b009529650090c4862a181acfbe8cbbce57e9ebfbeab4bafd5723b206e968a281df023bb06cb94de7dab0e76ad83e46330698727ec7766e1e999b2c5a0e1b4fd5b8e7192f9e22d72cb2e5a7c2f29b33fd5ee3ab5a1c5150e516fd1258922f7feb1bbbc5cfd26e863e24ef2631706cdc4fc37940b90d4a6f007c3fd3457d0fc45c0e9b104c8bcf6eeb09533bf280d53f9cfb864846b5aa04f9229231cedcb6bc0b52eb0193b68d22ade057b842088b4c62ae3eb7ba85a64b00e5429dfa42e80d9fbf900c0b9f73114b91943015884630867dab2f09841084807251da0f5e024b3cda8d1cdb092ec662cafe7e8e79003abe1bd981e666eb3bc4c8c03a1160ae521fd989345db534cb12a7cdeb3af60d6278a1ff42b2cd37f921664f4b775f8e0d5da2e0aede081da674254569ac841a0da900789ed13feebe7667396bd5ccc025064becfe358b3dc68a2b179aa95508b882f02c06130236f1f1a3c2b71dfc37b2443c1310b2cb5c7a14ebbcbf64ec2ca5e187eb870d39c7340c81b157f7742d53550ea78d89aee3edbd8acccb42ff78c517292cf9c9ddb5bf5bf448c802640eee717b1539086b4934c53aa7b4b163c41f9a515602a61826f2a71a058e6b88dd2bd69d421ba332402d6f4d996fd4d585cc137fd566c34ecce595224058976637d7f25822dd3c10673809c7392daeb8b34292898f0fa2643b31295e1343ed678f20119272c116632c87eac7c7bbbcc39fd77aeff0a178db63260332551dec6c37db638b008064a3de1a573db66665b21ec98c42aeca241921081b22c6da2246656e90cd2a5d9ce9e63e63c59a18d46b9d9a3fed93015689b4d9cf295914bd5f3f93b8181a9207a3c6bc1c0abe9176a9b806092d280efa668559d1389dc3a8cd8ead85e4c39bf3c686af0fbd691b2f36bb605aee802554001c028659b626d95e4f4d7efe435b98ecb5e271419b0bbb9e980c4c55276f5659bc2f4bc34cff47e1e2b03a551725d5149f6417964137fed8652def50ddfb29eea141a9ae20deece399e2daae9022f193bdb7efe95e32d86da6d3d378a16892e615615a9cf9070a6575bf947d8b23c63086e8118117554b78b3f1ce4f4a2d46bcae2c6d2d65c2fea5d03e970afbfc40ebecaeb898636ba6339dbd580eba0a0575285e8da817c6c567fe5aa4195f89d353df84d21aa155542281238a694e10c48824ab0724ffab7982bebc73c921f1b68a55c7819d15930bcac2b735b75bcd5f3e9de8226b5535f104b716a9eadb0617170dfa7f17a24947c3da37adfd8394dbe185fd1648283fe7f05bc1ab46edb6b192c7a72d9df3607be116d23eaa05575ecedea68633f9b808f250dc496065d93bb2d4d01a0882b1eb7386c43826dc255e9c49ace6c8ed39ab2c2bbb3b96dd67a90ddb5fcb767963de64a9b10c07a85affa75219ab37b16097e75b174fe8b2a9d3dc1bda9b0150aa6bcf840f11eb80313bec232e03171082de29a38a8f106bed5f87e91e7a069c39988472e4be6c70be4b0cd182d1f9f1fbd1dd0b8f167aebf61a6cad3126c6d6c67f78aa90e4342902ed0e8409e2e55e8ebce34392b5fc2a6473f0100f72cfe0bc6e195a38ab646a9acc1ab159fad6bb02ff42a625433538bf703d59f426d9d2bae810ce435957b4001f3920291d45f2c490ac316a05d75b1f7dc220e9c2b161fcaa858b9bae3f484340666b97d087b2b1bfbb75cfea583d0cfa248afab144c57062c0f95a09716f6040c10ca509b8cb2b7e79200ca9fbc2cfece44b586950e41d6f668c85aabbbc3267c50f62b8829c53c12db227b04f634046b489c45a47426cfe2ff4a86d765808038f0b669ee701978b4e80bf6528105546db513bc5454e0f5a435692da6d0b95db01c893cc9ae5891d31664d924e8f625208c4c06b2f2cc96878b1df08b7e37edd30cd08cd1fcee02bf4373e0e6f57ef3274f7968afa3ba90670d511e2ff297121221d7d3dd792de613e57f142a661ab85b8c86af15d4161369d00fe34fd3f3d35989ce69d3d9f9722e66b735db8e08854febef243be9b46e711d0bbd453e71fa8a26d270dc25cdb7f6941ff64d030fece952eec34e61bbd7b8273aa8745269c4a980dac66067ab77519d7a244e57787784ebc8bbcac0113ee59b1cd092c8f9db171e162a1928fcc0ecb2838cc97716dc42e6c3dfface21835d8fff0d2b5a6c10e245b10f853ff4a5f4f0c3d08d25094bad760256e2099ec0a1212b8e5414e6ff28f883703b27efa3b86ff9129b8d4b5a2b760940946fdc3eec7e373543aa88e09a52270f71d8fc4b1c48f00c8ba61b75af80b69091eca39afb00449298ea193db56a2faad9a7c19d3aafb65224eed89f80b409784d9112a62d322155eb365acb8563b9a64e258133e422c167920f45aaae2cac3ad73041e10cc774fa786bace97d808a1d8a14d582a2aa486b7ffb85b10b9b2e0f7ed7ecaf4daa1ed63cf6afc1980ef28c3efe91b0022a7b6e0bf0596daa48d338539c162c7445d30faf8e697c19877d9d1ae7092c01fc4b6a4644c0d5fd25aa413028f3a519967d67714dbb2d430c53dc4b25da2d4aaa7ea490fc1a1e6981f0c54bec3610b59a915af78339155c67d6add394c17662b1ebcb4a7113a543ee8f188e8d0ee61c70ba94de5ea3c7ab2191816a699bff1a0ee93c2b77bef4393697cb73a898ef4a56cfd7720c26546655ea9500ab65587307069723ae3e76e2d91673ffba9d75c293dd6d22ee3c98ac19e0d3269632f5bc920b563ed15b8b57d16a6c990acc18bef2134ce5c9ed28b78eb98e37b533012480b85bffe76ed428e6e929b144b54c9ff3b8685e170da7e2e36efb789cce0094bcbe494c57bf0b5e1ebe185055020b80020dcb420fd3a2f778b2a7125d1e34932b7bae9db813a957f8bba986cf557a390da980a8c84f5b0cdf9686770dd0ea39398cca6a813aa47021dfa24e070d92447552e306fab0c3af3458512cf75387be3fcedfb26ffabdf11523a16df4c3a7118f828e84344c3ac36a1898317b4deba8900d841bf53af6be7ef19c5f9bece97f191c048697989139fa361d0b785e9dd00e375cfc8b57d3ca78bcdcaeaf7c1689ae855aac0a9d677f765951abef6e55d5cba668fa7e38580ea56a8532f2d51f63e3c75f00c7c1f5dd7ed0ec359545e851bf0e9ef3013f9ca96e1f5b6adb403e11791351460915243e4881c2d182d1efec4655ed4736b69e6bfc5bac9c9b32fb42c612a97fa713447f07b4fc4de198f62e41699fca97ba81df93a389d7543e2afc0825f41a3a918139e21645ce5c41f8248169297c3e894ae63adf056e53bd1e84580fc9b11a42c2b372ae0e90dfb70fbccfe36ee360686b1c727cbbfd4323d7dd814f6e6e1bec04456eb23e887710c5a35cf9d8d3551a49507dab58b12520577215f77ec1c7127e03125b4cb229c93793fdcdbcf0a0a5f2233abf81f94199143861592ed03590a44b912690616025dec86569cfdbcfbfe145fe8ed7deaac57ac6905084c79e45e3799036c4eecef1ff1e4d2fe2d6bfbc0b2c653a5494de74904f218670ab2955a5f293f32006d023c335180036ff848007fd44cc818d7ef8a473c9b378cb83cf52b84ccf8242cf80ef8d5e2c518adb226b15e9745e0709fa57e8419e5f69b7b062009921db3f1a5562abb46415db791eba68230bc78a7398d1fbdcf9c74079e66c2e452657a22c6441db42915c117015a0e1618b0e63a2db3701ca8b256ec7136fd3cf299f090b77b703492fdd1671c5340cf11838fdede159d34cdd929112a02718e6f41256921f69810ed062000c7b92afd2b49943cfbc1dbcf6e0c4b7b17445368b9bec795cd94743f7411b9edae391c96f3294853507375e4af3fe0427fa734b5e86c0532c967e0ad4146c79f294f4627b2c9660dbb871183a51a68a7f50f5f5628245cce37c449e767e830bf30d202ebf6091cf72e6ad61ca72ac419cebff7e46966860ebc4de602a32adf703ebde0812d2027517dee4d354bd2d195cc0ffe9e6c5b9e35cf25c16f6e08150994469c01fe49ca68f5876dbcf05aa2ef09d4cf2f9e5ed4a5c53852841ca410df718426889f1b2e2d517b717edfc00f334b484a8a66dc8effc9909887b5a45cd1948f303874900e3472673cf293d4a17b802ff261336d6854fd615eb4c7659d12a6d8651f7fc527603b0a3b190c8918c52cf2f055de15578fadf78dd9055d435201c80c7b347892f9d24a6c88365af377aef29007badcb0ba60aaa844823c7432e614ae0e6a747f5737418840242e6338c70a806bdc7eeb02a035c6ed5f7425720618420b4e48b8765f7a4b5f7a55ec8aca748c1454fd1f1e551af12cb9a4e7bf17e21fe0d1e751336669b6eb0aefa4c3ce7656e4ee7b0c16716fd22034783ecc557fd65243b6a8857ed317d9d779bbab63f470db33feb6cda529d8edc06052ebf089a91cf7b636c32f0d74edbba85c4cd49c09f280c448273c4a505344f76ec15afca6e2cf464d2ea44815b16dab40d8d7b498c2552882b48b9d228334f18c326627b2231eac15a2e21c1e2d513b6c3c7869bdb884f9e8eea559bf642fcea1191f3a090806c54f85431d13368c5b49b488ff04ff1425084a75437eff8508c20fcbefc2a28a49ba8fd0fedf761eab4e9e3458a21e508fdea04ed0527647452e2bf2f208acb570bbe7c37b0435faaaf03db75a80fbca16dd850ad4b9bf7034439ac3e60b7f3d9d517092cbffa06c99e766674b97084cd6191b9a4716f832d18fce12149d09ad5489c89e82f2773b9c1f34dbb4d5fe76a085e04ac7bb7fc20739eb7d65df67e550f5e4387b467f18857921abe86d13827ec5f211160f18179b189a0ab51d3612a816c5158a7f9c26158c3ad1589b133d6d7b1c5465b783ba82b5d41e74b5960b2091783bf85913ddd7e1950736565081f251dbda34a03bd1611adec09ef25dd4b3273a6916d89e253e01ec626ac56fe595c51815dba5c9dbe82ddd43b837799023597ab1b13512d32683423fbd51f60ff39eb8f02eb2a7dbbcbdf5779a7822e478f019ab89ea5e005f0a5a1ee248e7c10c0068de51550a923dfcf205c4d5b4735d10b0d0775cf01a63abf28d54eec55cee57b21b3a1081dde0cbce7a155a027dcc2e515c23873b26960a57d8937f798898572afd647052ec600e264c1ec023472e16e55a962635d5ae91035f097a3364056e4bff2aa8ff24ff449103cac83ffbd4b12b5cc7021a08bc5ee71061990cb21fbf8734e8aab31565e2e2b9a7aadfcae6f3faef6b3f8efc752e18c88e4fe994c2ee36a114e61a7330c2d11eb0524e07b7b681e84f225ce32daeef7aca9172211cdb6385ba691c9693005be9094c94b632c36a612a8c12751bc00592db7a8ca212d8e418d4346a035f59e969f1e06fa2259580d40f5b03e348f9365e3552fd1ccd6695736aee192da179299527eb4eac10914386f187e165dcf285f10ac4e9d97ca785f34e76e2f8dc7377e150f6790f177d28b1fbb02f2d2c7f00261d34ab925b6d7c22ae9acf8054c1fc49e04034ea43801ba6029a6bfcdd9ec680cd198a3925b421b914559769184955ea6b89b8d0b6750016fecb14980b66abdd9bd2151614ef4c7273c034ec978a70fbae6a47603be85d0a2760e54f3599be978ea6217f4fc63ec2abea02953561ab7ea7f635398aa726b2e793ff9fed516db98cc4d5cdcdaac798f8673af7fcc8b8a59801a41b37e1f0ed0456903123ced1b4841c8a02324e17d019ae47952af0df79487286ad338a14dd71e71241e4f56020c0416262f40070b5754a2c65fe26b9d5509226b04307d0ab4b0914582e8ddc945a97d0e37129a71e2bbb63ca93ba363d2884540d33f7593729614a097b1eb2343246066cadcf6d5663a38cebeb21f79a9e401824827518060c0d9a2f8bafdfdf92c80141ebab5e6cfb0c2da9f9cfa38b55818de74ad5849815046ffb150ad7a9d830e5a62869913b267fa8f564d9e0c1389d50e144664c6ffaafe6caf6ef62047b28f3e0b865e6c27a7a4d465e5be6dc57b2ed4f963421d4e9e0bfb12739c0b5f9db5a3aa8d5a6515ae7b8fee47e553881cbbfa97ef8078f9a126ff655e3d8193ea4b3c4dabe16d998b86bf5140587795f63e670f62c3e8310a7abbdc443b86ec93107499b6a2c28c38c5b4304b61411720e491a1876e8c0d7d22e5a13eda08467c3b3438ca78c8b15679fa7598a77e5e1ef4d02a7db8bd2ab3e307e8b984c12b8b52667e5180f2e6b9364aa626587a315a2e82b022da47cb26786d4e4217f2ced9c5ce58b17e882f5263a3ba9b54506cbe07412d32e3150f4dd72099b7ec0ae4f3f5b098fcfc9d30ef8fc4c6e8ceb27a0523ffd23511a8dec55acd4756500fdf6e42fab4ec188fb09ca303b8bf3394344b0123760d30be85de5762ae425dcb3f5e2ec1204b7ed362a804ad8fb7c232c3fb1ac11b0a9eba41c6f7fc364905cf00a97e1d399cb6b7a50cefe0780c6df87848605efac38c83e3a7d07a08fd29c162080e3363734eee96e123de11e70c26064fe6a91f0c21c14bcc22c4895716f", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x0, {0xc25a}}, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x7, {0x0, 0x2, 0x0, 0x0, 0x9, 0x7, {0x0, 0x3, 0x10000, 0x0, 0x0, 0x81, 0x4, 0x1ff, 0x7ff, 0x1000, 0xffffffff, 0xee01, 0xffffffffffffffff, 0xde}}}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x0, 0x0, {0x1, 0x0, 0x0, 0xe}}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xfc30) [ 686.996295][T22564] usb 2-1: new high-speed USB device number 4 using dummy_hcd 12:30:10 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:10 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xffac) truncate(&(0x7f0000000040)='./bus\x00', 0x5e1) fallocate(r0, 0x0, 0x0, 0x80019c) [ 687.295558][T13826] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 687.396300][T22564] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 687.425237][T22564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.443079][T22564] usb 2-1: config 0 descriptor?? [ 687.555330][T13826] usb 5-1: Using ep0 maxpacket: 8 [ 687.685470][T13826] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.695971][T13826] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.704980][T13826] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 687.835731][T22564] usb 2-1: string descriptor 0 read error: -71 [ 687.859232][T22564] usb 2-1: USB disconnect, device number 4 [ 687.866089][T13826] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.876555][T13826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.884691][T13826] usb 5-1: Product: syz [ 687.889477][T13826] usb 5-1: Manufacturer: syz [ 687.903940][T13826] usb 5-1: SerialNumber: syz [ 688.235483][T13826] usb 5-1: 0:2 : does not exist [ 688.256052][T13826] usb 5-1: USB disconnect, device number 28 12:30:11 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x40, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:30:11 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc47, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) read$alg(0xffffffffffffffff, &(0x7f0000004ac0)=""/4096, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007400)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x0, {0xc25a}}, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x7, {0x0, 0x2, 0x0, 0x0, 0x9, 0x7, {0x0, 0x3, 0x10000, 0x0, 0x0, 0x81, 0x4, 0x1ff, 0x7ff, 0x1000, 0xffffffff, 0xee01, 0xffffffffffffffff, 0xde}}}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x0, 0x0, {0x1, 0x0, 0x0, 0xe}}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c80)="425c2f64620f9595eb88cc4143024939e71eb7f4c33eb1dc98fa2cbff5eb1fe0ec714b9c69b533df93aa4ebfae05786164fdeca16cadd0bc865f3111de47d1210f0d736e899e41544a87a419876ebfc4d3e63211058130d270a2cdbe909819ae2087021a4167acc2a9e7552a5b123470ee15f82efa0c8308faa95bff6796121d9313d45afcb696f3e77081d210ef6820ddfa2a02414c6e05637fb45fce24d3f16514ac81146c3d912ef6d4e9adec48a827a49113cfcfba6a9fb7c843ebb8b1b27715b3b6bb5fa1f7679cd35ad3fb5c73fba65583f5e1cec8d1cd86108a36aed286107635cbb705d073bcac1597a3e53fcd0e7b04ff31b5dd90f2e9329d4de7e34b059e7b212354d58909750f5033204ccbcd49850088ff8a27ed875e63e2e67255995683174d09114b7185c8bf6de6cdd815706219438688cc9cb3c6791557d78abc03870bcebb343a11ef35536b73d81e72d53ec96b01c22f903d9576762353b996cb0e19c26174f01c876285bae67cba71c09eb76c80d8463e00d59a5c2fde005ea727f17f9b6d6ee6bc4bc060dc20931aebaaa1685710c493d5ae295e840c3d29534ef42249927df4c8fb8fa7360a75185de3283007d7987b84763f7c501bfa14866abe2b092c18632aea87c1e11d2ca6c76f131d29a5e2eb5928e0c02e070150e72c48e0e312cea49927988b0b1efec53f7443c4cf2ce0d6fc7a593fd92771ea3110465654a2d35747fe74161967e28e4aa11dd1de36b08d74cdc98b4f1cc1f904ca85018a48fe86836be99db5232b04f6bba27ce1cb2b6ca282eade4a32635388fb56afaafa581ddcd52b4669c675876e2dba39af9909e62e3722106cb5354ed6374e5e00ed4afbd28098c0af0a72718a8f4cca9ff96e1ddb7c4da59bd2ed050e2a53eb4b138294fdaedb12be94dcedff14d4c13b21cd9ff79a929182ec2e06897548e2bca29768ad5d1ce82358f36f3a58cf24f4ba344ab25894a955579277339f4ad4f2b1bfeea6df8873ed3f31f2428177413403d6736291819adf74310000c426aa10111663bd691749e00b022b532979b6e547918303684b6b7c7032aa4653e18155fd22b5c0a967a1e800cc03fd01df01c0f45a9c9b32b726c8907c96450500bec845d284e748c925fe4bc3177dfaac53ca5b1685960da1976f3b34a23ac172a74d5487d7823a26d01d1840de57882d0b8c3bec425079221329b4cb140290500e0f38a27ef57e6a435c38837fd3d7c04ee927dad15a36637f3204a3c8f4a2dc56dcea6bf3e59bea347274e85e68286eda7318b0365b77c333ea4950e0750ae28ff67533bcd44b05056aa05f034552e04aa4ec33d5fe23d33f3bdceebf7d541b3098e5d6bcad38137a2510c95215ea0bcbac39efbfc4403cb752ee9dd819340012afa2e993bf23f25dba728e1caba12c7ebad5a4eb12e7c89c561e345579484bc249633b5a7e930f8276f289908d6f83e858ee79a62bff26b7bde215536ebb2de82ed957848623f49844f436440658232a64ab302cacc808f72dff9bab43c5da906698ffb0ac2e99acb56e0173167e8642d32d2b8352db7afff88e0272ef9ede81ae60923441c58f3c7a0c4315b520612f45c0c6164cbf09ba601e31874a58d84a97e8ae5d3d43d318a25e099983971fbe2108560e76d0793466d6c77059bfd719d5cc358c0c86bd2dfa60d0bf0d2f449128ff5c61f4f75b72bb9fee363b93b1e037eee7055596e4824aae4d794eca1fba2a0703b138fbddae4d1316d77d69d657df2fcded6e9f53fa4b2edc9dededf63c347c42e12e51b5744ae8781891f383e920523e51492ed0ebf4498e6eae486c407c7dadeeb3123c65d90869bc2fd844769a17dc1f85b37314f7eed558d4e5fc61ec054cba1607bdd30d75f536082c03343b7a0eee96c412e9022f2befd4bc7cc0d7f71c0318f89a161de81948c6f8ffdc40f6e3eb2db97d6200c492ff74ce9f9f7508fc2d66f8ec58ccf7a2881bb6de29751844ad5e15e508052435ae82f6aca2a5ad6d446bdfdb4354d700445bf63e6c12a9dfd8489ca0964da7b41ef886ca6354c20f85062f9ae7e2c574d34f5e3e54cacb7e52df5f3bb8aa3f1ec20dfbe19b0812c0413bb8151687ee76421c2b21fba495fbe84d232f502236717effec444a6f8f66286432d33d449c0e51a8cf7decb26839162c34571f15a9ecbe6a723d27d553273c741c6e0cc8e3080cc3c9790525533a5b27c68d6275a25b7fa63aa4f0af89d7a05fc26bc50294c7ef8dd5f8ab03d6980bdd086578469c92a0d734aabd09df6621d65e6068073685a5371f7fc52313519a96287a1008a679a7b749e058cab99c0eeb54713a45161700bba1b7cd78cd8d82505b91304d033ba9e13fe042d5a644f176670c1208a1cf79735c86123ba55e1a73048c91b1554b17c2e239129a3d2d32b4c29c99254f19a3bdd60879c3e6f6514a966b14f325db29f3b08e831490e1cb11e9199bd6dbc7691be6467884b670fe850ed1b8749088fad93be94303faa371b9c6579626e9a6cb3ed7051916a51c72af2260cd9d155b1c81ec60a6ec0ec92d0e88a613bf03df28511c537516bc587dd3589fb9ba165d56d6e284a30d280473560475db758b7ad9e87d9183207c774640b2bdb6f4de32b4dc83122d2745b8c65d927caf60bfb424945b1ecb0f4831af4fa64a55b295a533eea460fc43d10105add38d54187162a880fbc07a70a7d922c15e6868291a6eece6b702a4d2c587a38a0d2f9fa6423a43d6e4731cbce395dab589500f423390a336f01d5d0a57a976120d1aa979ca9d110fc2be79087d295beb31259d5db84f8d725d757e82c0135d4a36ee380c96aef7e0d2da039b593e40e0f6f11fbf0c8a495fc789ec26f2fbdbdd6052259075d4e3f118a7fbece3d3ec0e5a5da53ddb089f51083b5adb262b23a14a09429211e9aa7abf402b716b61a98d49405152dec6ed2433b85b87d7fe9335e96f27a731597982f7de28390811519686549712e70a7ac52dc7011286a5dc7913f001520230da835a70c495615ce4fbb5b291594d7d1f96d182f31f3784a6ccbeb21339baa168fd67aa854f7d2c29cb3b3502f774f109e324ec6f04484738e42c246afdf009fbc2de63057a6bd165abf085753b39e3127880a27dfb22056b3916f25845c7d9c8c3b6b540715cf2409f8d1e234ff272555bf01a8933a58b14af5d6c6ab375b80a2e292aee4b0f4264b8db673b3c473f8f36c014afaae04ab4a7ed09f9c08e85fea6e5dac592840c6fe069f1037adb8d97c62b2b41391a1687afaaf383f4577ec6765a82fe41d17776b90c5efd686e3bdd5b084355bb53367293a6e5172d1947e1d46aab3c12f7d583a207a2e4b72f2b33b56b3ae223dc7acb18ee1c7b81b8b24851cb46dea62ff854ffdae08d17ae1fb1c6e4005cd35f8e6a6da2c971953975ce3bea4799b077b458ff6c776c299711784b810bb7ae54f0822d4117ab8e714dd98675a70dec7c8e88eba1e318492fa5e67fd40c8a4a32322ef8279fe634f05d776d964cb1c52cd25511846ca4eeebfac76d23b2f8117261a0132ce13794b29bf2511b6b8a300cc74d7217c6968522629ec131cefdb3d3b2cd71e77a0e7d768a1574aadcd1933fbb003ef8fc4b2d5132bbeec343e41d3bfb1e7dfb136ace18ed9c5984a533be627501b9d448503b44e5f123ecd804be552ec1ada7456a9417651baf350cdfaffa93166984c5a423b863a6a85e56d12e0ed3b2e3f42c325a8c131d4b5c6727c5f6c8892576935a568a5804518c262204d2529a9e091c739f00589971071071c834091bb4aef31c4f5b269901f446ce70ae0bea416e931f9d8311937029aa44c0c0a6860882d9299398ec13064e76ba939158089bdca3361b7a092940ef99a2eca7172de4aab8f933b10ff449f0896be94ad29f13c497a65f9054f72f17a902763d9b2ddc492fd8ab85bb7e163d8b70d27845ac7a9782c3878f1e247d2436486984395dbdf75db647608802961627d8f398aaf517305141120619f671a303b441107b9aac9b1e625d416d498c730dd8d84a77245f263ffbc6f44e141b4dda231301b9e79c15e281b2d3a79bdcc3e5b6c0f9ae3b04727e8633a8b6098b8323e8563a7db31cd4f8a70ee723d948779da041db7e783418f988b1d550ce5ed38b67f37b480ba7fd0685e2daddb4a2b55dcbc5fea69cc299c52135973cfb04ad3058c64632aef1e3534b4ec9b6c6ffab0bcd213a8bbf7525fd5ae245e13dde4d2c1de98ce658e27c69bae43a2bd00e414c6c027a1285cfae1c4e32a9804bde908939e39da2d10b8a30c13d71089f793ace585766c0c96ef4f5bd4af95f42f4bd4b77ec6100314d5eafccf32c769df989af817b9bb331855ddd91a6a4d8f599e2c8ed05c6edbc7983d43f2d0ccd8719249c1527a2b08fc68ed3b215f933be65f7fe3de5a097ea3c25bcc51e28921045e94b8df7c5ce2acf172360f73ce91b45b99479f57bfaed3400bdabd76664a4cccf6841245159faae2f3fc7bffb837d5eeeaa5c03b6dd384c7c6935cc97c673ba37d74abc223cf5b2ec689a9c47f58de9ae940cc559151021883ee8d9993de5595a7e5e6699f816a31e16add862e6022266d2d1c4e9c3b035087f54e53a4a32ca056f30ef3b278561fff008ba3dd49dd81eb314a00b96c633c3ca6ca95943813f255ffae8ef87e4409faace444f0579c9237f8f18fdedc84c481d8856360c66906a77df0845699c0df194cb46fd55b78d922c9b2893c897dc3e561143b59921e6224eb137d8660181102934d08104fc9ec2271252c3d08dd9f6677e38d0784afcf068d0b52a4c1181bee943553c4d10357b32b41130238c212cce6bc1803f7f326d918811a070111d8542cfb1f15cd548d083a951a0eb0696cc929d082d4410f06bc683a67bdb3d5e8c772f291aabe1c1955aeb4c750ad90a956e1a6e43e3d251cf64550674951982a00e719190a2c9697d43d599e44d15eb9cc52494fc3c2f79c00714ad4261f7c92f9031293509a905556c63ac3747ce836884d2e398f1765335ea781347a8595ff8e50003e655472e707d25401b9d79c893ebf897fa150424d4f0a0c9a3bc62ed49a300ce3774ebb4bd87616cef9d4c1877ab780572cd63f8dafe2e163b189845f88c89bbc30178b1705c314fdaaa718cb2d267a5d9217e376d1b7e79138c3f81cfb4b17898136c0747675431b65c9a6f318adc6fccda469ae5fdad50c462a8e9ffbe740f9976d862fa5a974fff5dea95f1c56fdc7f7876fae5e5aa4c0230b294697fa7963ceca908eea9ac243d6517621a529558bc2bf0cb0d2252b11ba0daf12ef66657575f298be5485ad00062c9193f4be5d8f5356e98d1bf6826f3defb442a64852018799a1d231d0bcb8b7aae7433655cc8f0a9c4e0dda02886e92dfabbec022019d926db25e841b0d12857cae19de1be9941ccaea2adcee4bf39314198df41c35b7efc386af7a6b48a8d54f26a6d9d883b196a3ef023ee779d9374fe4b088066b5d90fa582abee9e3aad014b5c106536e2fe44409d106a4520d7bfea11368016b6aa52eaa1b6fc337c66dbd8879f580ae884ffa3d67f26709a9b52698b04fcd0d9c58367d8c6812641195c3ee74011012aa9ba5cfbb1ac926fb500defbbf2695f1e17c163921f8386d1d900aa8fbe8b8780e86e99a70bf5ed6704fe6d54b5ea7d2a5cc606cfdc23482d5a7c107bf99b7e697d791961c6e5afb41127f4f5c0ffdd734cb7d3e1c7b100911f974c8d7c86db365296a05e4a7c386a6c8d83beb638e7774d26a593bc9ec9e90c3388f2a077164fcab77aa8a3d47246642d96af00f734e3b0a352ce68268c80c4f1cdd5e04d5bf97ae76f9710b53f7ec851e21fb9ec7be44c36f945c869aaee462f866cfda63ffa65062da6c2402e6e20661444110681d384573b01a36ab60be50887efc2e1811ccae76bf9257c6d739c9c9222a9f27425c6fb3615ee1936037e76ae0377c0242a7297c41d7f598615ab1a23773c9ccc52b216ccc58e2fb6d1a278c91cd26cb6f125fb48454a0714bfa5c11d95cad60508b7a8e3101c5f115330bbf176028ce73aceb66466aab12f9e57e90c1c534a9515d703a8bf1b4be59582ba77114cbeb7d4faac56324c7c71339c38ede477f5ea99f0e3158ae90cb01ebbd2bf38d81bb4ba2659d787c8d7a073e6bb46785905ec8c325375df3e40d4886305c19b6d5e76883aaa307eb4ea95ca708934741e424ee3931cc9a167dd6de719af951875767b76708a34d34850d83dcde1de469f0f43d2582754b1c1cf52b3dade7ff2500a9aae9e6e8217ffff6e592ffe867bfc08a970e05196d6547e1542b2b3436c0b3da40ac9b5fd64fd57e26d4363273609d32dc524dab2730762f4563a50db29daaacca096cbe7d379d03d22d0538c211e4dd75c1fc006b80871cd826d3e4b1316796e44f2f510e58725f8d679c97c314310294f713c42dc791ec2b562465d0d2c75e520cba6beb388424735a37266697aabccdf965e3e75b5c35e5a3436c89c6fff76d2f89a8a2180d673c51d29376523553601803d19b3ab0104faf007274003d77f6a054bc53cb4de04f5a067fb829b3ac1c3401e9c082fc57bb551cd06b0faf978917a337b141da037ca74ad6e5b415cfdb8ad262df1721249e46156e47ebda55f1e99c2cff8864415c6d1717d70f994ee4b51f13cea4e8c80234aedd476b9580214684ff8b79b83ecdda4a4d2fd588711f031c2fbc5de9846388cc9d024ec49cd92cb528174b325c124bc4ea4fc206c7e4107d1cd9b3e3fec223b58335f12af5aa2438bb92c2475e55a1f0f50e5058aaf2540290b0efebd29674d27dce401674a9bd73559c225ff246dcf95cd99a9f8c89747886c4ce33f23e9be6c8f48d6219cf2caeea3787cca72f41b51dc937265083e8bdbaaa6709229a4811e9f49f20a9ff4c7e493c464caaf6ce3fc237a8aa8ed466dae0ae088aa6397b027794841530fcc6f9650d874a10917fe3fa17ea6e58379849fce5410ddcef3ad23e64676f617140274ade6c92296209fb7cf4d849a3181720f91fe496acc88cc931cdadf601d28e5826ff1d4d446f0bc8f51f2b8f84b952121e15084f97b068d39bd4873c3fd928a76a64426b6d6141a6b006f34202c25ba2004434415e9abf33c4104f6cb0b1cbf89e9cd9a9c890c20c1c43f67bc204af3ea620daa49b8a81d526b6c12b99568db4d9e0856d11a7cda745de6b73f2c6f6699b851251a556eceaabf983466a96f532f5be62d2061f43d3a9dad86bd8dbcb2d196abfa3a4ce0325664f30cd0b9fb339cc121dc6968a37dfd5fd25a1b4a11311ac11cd3377001a331094ff06fc9b8ed2c619322cfd0170a1680e3e41e22a62aae1c069bc2fb4d4eb6dc017e1db88c041ec14f3a94a2dc1ce499099bbd0797512c2858f7de1d8637b6f7c314f40446dd374c56cc4e506ce0c825a815a1336d47719a9fc74089a8bdb3305cec2199c5d8ac360f00ccc3ffb3eb950ea5617c9ac8a8681866609b476b0ee9ce14834eb5e88a189a8759ecbb1d70bd3a99e5065d0dfc74384a1acfc3fa05387d9769d0889afc91fd9187175d5cf05fb3e334b9d73bd7137c90ad09a746aaa94a2084c1f7c1e81e7b86f63f01ad63a6eff4b2a7a14120ca9a1609429d4c7099b05ce16fd1387bfdbb21ef946bff934b7a7dbc060a244eabbfdf05d0b5cb4ad1614994b721468aece71c07954f9760cab348b9071131596954c246a98e73996f67158100ed84ce2688d11ec7069f1b4a5e76765c3467aec531e1644923eabc2e8b142ba1df8bf4e08d13973b01825b31826c024a71f4e827c4f13fd600845a0066fb256d92f3985a0f30c06877d85f31d7327fab1e5596f056eccfb061139a220c04cc858f1f769f213afc912aff2a4c7e685604b0b58a7851f543d2b95e2a4b9caaa70dfbef7dee490c911b8c435bf7e175d30f01ba8c4d26f71c8da4970a48c387e0c7344dd22b3a2376b124125719dd7a4cba8c17d63b52816092324dfe689dbaffcf673b3afe5536af15735f00a0017c7d2c63bb9a8997f4da97b1be5aff6e341314e147c2470290f972ab3a2921989076041dbb0eec01f1616663fa57090f19e2286a309d4f8675243ae6c91146e614933db3bf2b7a20c31dfef96d040e573f20718fd128d091ab5a07b7113a8e88a66e4ce2fa4d01c3c493a8ee329bab21e235bb27ae567b4a84d146e027154df4752ddb88410f9ee5c22c1da73eb460bff4eafbaf2d16d63afb8fabdd55aca3cdb90c53e6ab47cf970f5872c8d1f6fd61626c9ce1f7f1e144a055b0c37183d2513dde14457d7a0db5999639d94f83a8e4030f98d7adf08b5de3bb0c41902c08fe34f48b8feca5fa81aabebe2c330c152e50b902a3063060b2ac7e2bbfa2fb290272c15ccd53af63387006631f78878e476b4cf5c7505d982b2f1c37e4b21e1ee292edea50b85b3ee7afaa90c955d363522d626dc605d97a6308307313d79146fdb1c193699b0b37559fc7c1875762d193d77474762fbcd69c005789ee8cb87e8c03352aa5ce7cd8af978c1fd2f1e29bd81d5d8f837dd7242dcb59e3404f0d4ee3eaf946fc8107ab4d913e6fca89968c5375761b505677986ff48932acc28912d726412f535de258c79f34b386898437b7f96aebdfdb9bd4e33e4a59f51403796963bcde81ca1fb6e2847666451d81eadd76ab7107edc7893e75f21e1228815aeb53be2dfe6eae47781da42c2fdbc2380dbaba839af68bd7357e3be9ad567f7a7d846579b82d8e8256068f2789e9fe87d3b980bd3c3b41f86fc98b82b66b7069041a7a5ea0439d748f37bcb0deeefad1a6c36a222832d395625e60deb3106fa0edaed7ee859c312c0bd3aa72b102402ef1fd7128cea489506df4b53b109807644e0103d82010b954db76981938497c16b2af28167278157f69991a2749fc238b3c4e217b4a9259e9258f21cdeda7580c58c613538799c09e2071dc1538ebc07c90f6b339da8bc0985b8df372afb0d0d04207a7d1007c2e840421a6ebc4c1180cde26365dd62ced6f9986d7289c90bf356baf2ee47ce8456a4bb3cb669d6a6b766ffb5233b2178cbd4b6a83a94cd699315fd65f6d5b1544d93307b97171dc8f8ff11a0e913ed2c612d68df104bba443e0ecea114771aa1ec322abc742a90dbc4fc5b1cdd63ab648f782060354d23a14647c03b341fca0defb684a43fe410af7e9069b4efa0ede2d6530110c8d01bf359e01a6a17af4b5fcf3d879ff5a15ac3b42a1b35a4e8c7e07c1c07467c4b3a8264edf9b06cb388da8d483e7ae7ccb56686eb9908978decda6fd2f0439d38d1d6f85a89ebbe771240ccce1660235958eee45be2a597cee92c1263de833536c9bbd5454156b396987525c98a307e20f583f6ce387325daf7d44de1b803179edb76ce02a3bb5c9cbad410b2ae36a276799dfa31054f62b658493830b7a2395e023e6befbe606a28a29afecb1d49d306bc5e97067a0f5a2bb3d7e1c7877bb400b060447896c05ee7ccab7a94110e7f628cf1dbd5499b8a3118160f147a9020c602af889c66122d5b4023f776d7414158d5394ffc83a21b1b09af847191c6673da03330593c12ee9e08aa552d37bfab9e38129b312671059987348530a67a1793414340efc22709689ce66779b5bf71e3024112a6949e9b70ec5f2381c30a88d6bc6280f2213c2b1bbb253194b9fe2ecf3ecbe4d24708d3183b24018a08bd8b347d5bde0432f53282177e32f2af32343fb740ffb6557fd9b4a12ec3dc320cc403b8b6ee20c1bada4c5b4fcbe6735a77b760132992e4ba6f05c2586769a5cb157cecf96286923b88db53622b404d79f5c71b0a087b5af1fd13e4ac20b7ab5573ce13ca63b780f71f61ee9c1723e1f5370111302e26dbfb9dc0b5a3a412028497486e804795c738e359b66fbacb5130f9f66cb91588518a4e4ed30bf8ae1f11d50ec1684e4d617977cd6f5743b4ed28de8405993342fa2625dcca6ad8be0c480b65e2762169d33be8203b7366afec1aa4a76f053f9b0b9f8ab4cc2b5f87d9ea0d95854888d3e1c8bd657ddc16a72503ef98863af3eaa710dc18fd917932a582ce49c397abfe3d5eb71e780b628929fe5fe6f73185f939d6ddfa62939b39382b7d6ec11b2df866c132628f2e7702571ad8796a3ea188295947c727cb22bc291093488d586db37da33281458f277dc9c9246d6ad054442c2a0a710765c60ac383b0be83f14f49d20d8896880a75aae82a7569510a999b2aa6d117363b7dcf26f9931277df33d1e137985895c6555349a4fb10e568b14de429ee3ca2ef9f726d8a8ffb35d8a8d3e8bcb2f1e9d2d716f7f318926c586ec85cbba52ba4511eca2fa1288ee44911c902590df28745feeacc8baa9856bd4b6b055d6c01364a88e1400de1a657f7a2a6ae38facbd8c4a236c91a43e2ced5440c76fde4c714014da76e8d4090ccb79430fc95afe5c353bfb1f25020065c5ec8d27042f83e52fd3c08034191a02938204721433e7ae0c90c50f9aa0f80afd3c1c19701311fc2b2af3b0cdff194dcea31c3c4547403ed5860dbba57e0d114722bb4bb50bc6ea64719303b55fda1c849d5873a5fac21ef3958753df7c267fe83a7a4c9acc229c54ce6a8b7ad2d2e20402a5a5505f22d670222f12a9db0f426a172188c513d5bb1fc2ffb1e5e20e70947ef44886c05419fce2fecec6252aa053d5303c5e6cf979d098a826c6bc22c5ccf10efc07c1d93c7bb7400bf67a33abf1370edc5a019c3952b57016e63d318189e5313a3e8b62370f015d9123a044d5f6c80f430fd87ced7d172c2489e28054a1d22a585eeca531e57b63ad04c114629fff98f5721727a509b11ccf9feb6027d7dc79c0d586333b2b9ad2823a7e900a668d42be7acf70ba63f51e63b064094c838a6a38a5467affbd85ad53efc7778cfd0d5d8d4a16d7195668b055d89a1a369c0716812726f347a09d0432e9b3bf5d24d430f5e17590fb58b7391a1ba6683822c7b0e65fc0e51583c4e3ec38f27986cc2c853b39dcc19f989bf4c02bde63e4d9354f0bbbed383ead87af9c542cb8bb85e8c1c6f92dd0ca765d8f2709c21d69b558726114d7c58a112b472ade2d41436f56b3b95929354cf458a9af9537a1a19f3e451255df8af89eb7ea0a56974b981caeb373d9125591210638364a2363926084068b1e3ee71a0aee769b66031955eb9e67e612a196ea43d21e6dcf9dbf68f3bc9fce86414f9bf4f86dd58a3960cc0c8e8ccf97a5a997d3a9aee36044e40f8490e8364e277d0cf48761a007ee80f690d441ca06e1b7bb1497fc8637f8c432f6400d26e838730c454177d567d8ffd013292e1ab0ab1c132b612d384bf3c642df39564529d923ad9c2dc6d3bb03b165744ed1210971cd00408775b1db42404839d858da827a0b971596479a3e28efab078480f41782d7aca0408b64ec2e494d48de6c67b1bb4cd46ffdb15ea3204205943f950d2d37741a488bb6c20db10f5546150c04088c0fa56f236b537aa47a0bc8c0b70a362b9a9abb9e69dfec6507e00700e74a442d3c42741fc4fe6b74c3c767a0b064e817a8b7a", 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xfc30) 12:30:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x402, &(0x7f0000000140)=ANY=[]) 12:30:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/115, 0x73}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/84, 0x54}], 0x5}}], 0x2, 0x100, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x1000001bd) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 688.477200][T24046] device lo entered promiscuous mode [ 688.501973][T24043] device lo left promiscuous mode 12:30:12 executing program 4: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "54ec"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:30:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001040101000000000000000003000009050001000100000006000640000700000500010001000000080004"], 0x44}}, 0x0) [ 688.745349][T22564] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 688.766882][T24061] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.783629][T24064] device lo entered promiscuous mode 12:30:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001040101000000000000000003000009050001000100000006000640000700000500010001000000080004"], 0x44}}, 0x0) [ 688.805897][T24060] device lo left promiscuous mode [ 688.815346][T13826] usb 2-1: new high-speed USB device number 5 using dummy_hcd 12:30:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 688.947142][T24070] device lo entered promiscuous mode [ 688.954140][T24069] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.954702][T24068] device lo left promiscuous mode [ 689.015244][T22564] usb 6-1: Using ep0 maxpacket: 32 12:30:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x40800) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) 12:30:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 689.065388][ T1735] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 689.146086][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 689.154467][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 689.189117][T24076] device lo entered promiscuous mode [ 689.189185][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 689.205272][T24075] device lo left promiscuous mode [ 689.240677][T22564] usb 6-1: config 1 has no interface number 0 [ 689.258030][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.276183][T13826] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 689.291311][T13826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.298857][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 689.316278][T13826] usb 2-1: config 0 descriptor?? [ 689.347342][ T1735] usb 5-1: Using ep0 maxpacket: 8 [ 689.381580][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 689.405188][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.486191][ T1735] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.500838][ T1735] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.511763][ T1735] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 689.540242][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 689.705419][ T1735] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.714687][T13826] usb 2-1: string descriptor 0 read error: -71 [ 689.717601][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 689.730632][ T1735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.743994][T13826] usb 2-1: USB disconnect, device number 5 [ 689.767864][ T1735] usb 5-1: Product: syz [ 689.772194][ T1735] usb 5-1: Manufacturer: syz [ 689.778937][ T1735] usb 5-1: SerialNumber: syz [ 690.105370][ T1735] usb 5-1: 0:2 : does not exist [ 690.130505][ T1735] usb 5-1: USB disconnect, device number 29 12:30:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x40, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:30:13 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_cancel(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) syz_io_uring_setup(0x9a1, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x2, 0xd3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000008d80), &(0x7f0000008dc0)) [ 690.478574][ T1735] usb 6-1: USB disconnect, device number 5 [ 690.497395][ T1735] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 690.565269][T13826] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 691.003948][T13826] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 691.013521][T13826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.025761][T13826] usb 2-1: config 0 descriptor?? [ 691.255278][T22564] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 691.375380][T13826] usb 2-1: string descriptor 0 read error: -71 [ 691.393720][T13826] usb 2-1: USB disconnect, device number 6 [ 691.495153][T22564] usb 6-1: Using ep0 maxpacket: 32 [ 691.616430][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 691.624883][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 691.634926][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 691.646158][T22564] usb 6-1: config 1 has no interface number 0 [ 691.657562][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.669380][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 691.683084][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 691.692954][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.748755][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found 12:30:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x402, &(0x7f0000000140)=ANY=[]) 12:30:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:15 executing program 4: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "54ec1f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:30:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec154544b2018cf8bdc00000000db00e9ffffff00"}) syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) [ 691.835136][T22564] snd_usb_pod 6-1:1.1: set_interface failed [ 691.841137][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 691.916610][T22564] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 691.924915][T24156] device lo entered promiscuous mode [ 691.945694][T24154] device lo left promiscuous mode 12:30:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x40, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 691.964456][T22564] usb 6-1: USB disconnect, device number 6 12:30:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 692.132057][T24176] device lo entered promiscuous mode [ 692.138374][T24173] device lo left promiscuous mode 12:30:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 692.255033][T13826] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 692.265148][T22566] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 692.284766][T24182] device lo entered promiscuous mode 12:30:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 692.306769][T24179] device lo left promiscuous mode 12:30:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 692.385109][T17508] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 692.426169][T22564] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 692.449439][T24187] device lo entered promiscuous mode [ 692.455745][T24186] device lo left promiscuous mode [ 692.505106][T22566] usb 5-1: Using ep0 maxpacket: 8 [ 692.625822][T22566] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 692.645049][T22566] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.654016][T22566] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 692.665769][T22564] usb 6-1: Using ep0 maxpacket: 32 [ 692.665952][T13826] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 692.695941][T13826] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 692.775284][T17508] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 692.785473][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 692.795458][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 692.804253][T17508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.815449][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 692.831755][T17508] usb 2-1: config 0 descriptor?? [ 692.838804][T22564] usb 6-1: config 1 has no interface number 0 [ 692.851238][T22566] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.860633][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.873893][T22566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.882911][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 692.897054][T22566] usb 5-1: Product: syz [ 692.901274][T22566] usb 5-1: Manufacturer: syz [ 692.906016][T13826] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 692.907728][T22566] usb 5-1: SerialNumber: syz [ 692.921289][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 692.932144][T13826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.932339][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.949582][T13826] usb 4-1: Product: syz [ 692.974299][T13826] usb 4-1: Manufacturer: syz [ 692.989733][T13826] usb 4-1: SerialNumber: syz [ 692.998272][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 693.057324][T13826] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 693.135154][T17508] usb 2-1: string descriptor 0 read error: -71 [ 693.165321][T17508] usb 2-1: USB disconnect, device number 7 [ 693.266726][T22566] usb 5-1: 0:2 : does not exist [ 693.283232][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 693.311030][T22566] usb 5-1: USB disconnect, device number 30 [ 693.796761][T13826] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 693.813017][T13826] usb 4-1: ath9k_htc: Unable to allocate URBs [ 693.846253][T13826] usb 4-1: ath9k_htc: USB layer deinitialized [ 694.024170][T17508] usb 4-1: USB disconnect, device number 6 [ 694.047820][T22566] usb 6-1: USB disconnect, device number 7 [ 694.061763][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 12:30:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x402, &(0x7f0000000140)=ANY=[]) 12:30:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:17 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:17 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x40, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) [ 694.610074][T24255] device lo entered promiscuous mode [ 694.619506][T24251] device lo left promiscuous mode [ 694.794953][T22564] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 694.935371][T22566] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 695.014959][T13826] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 695.155122][T22564] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 695.165349][T22564] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 695.284946][T13826] usb 6-1: Using ep0 maxpacket: 32 [ 695.296018][T22566] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 695.305533][T22566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:30:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec154544b2018cf8bdc00000000db00e9ffffff00"}) syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) [ 695.336728][T22566] usb 2-1: config 0 descriptor?? 12:30:18 executing program 4: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "54ec1f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:30:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 695.365380][T22564] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 695.374653][T22564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.421289][T24275] device lo entered promiscuous mode [ 695.435023][T22564] usb 4-1: Product: syz [ 695.448023][T24272] device lo left promiscuous mode [ 695.461118][T22564] usb 4-1: Manufacturer: syz 12:30:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 695.475958][T13826] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 695.484349][T13826] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 695.505225][T22564] usb 4-1: can't set config #1, error -71 12:30:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 695.529519][T22564] usb 4-1: USB disconnect, device number 7 [ 695.552218][T13826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 695.589489][T13826] usb 6-1: config 1 has no interface number 0 [ 695.612315][T13826] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.625108][T22566] usb 2-1: string descriptor 0 read error: -71 [ 695.644644][T13826] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 695.654039][T22566] usb 2-1: USB disconnect, device number 8 12:30:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 695.688546][T13826] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 695.708200][T13826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.729086][T24295] device lo entered promiscuous mode [ 695.736314][T24290] device lo left promiscuous mode 12:30:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 695.828271][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 695.895455][T24302] device lo entered promiscuous mode [ 695.901555][T24301] device lo left promiscuous mode [ 695.924877][ T9859] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 696.004990][T22564] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 696.165773][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 696.194925][ T9859] usb 5-1: Using ep0 maxpacket: 8 [ 696.334980][ T9859] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 696.345369][ T9859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.362093][ T9859] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 696.385821][T22564] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 696.396242][T22564] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 696.565073][T22564] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 696.574408][T22564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.575025][ T9859] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.592141][T22564] usb 4-1: Product: syz [ 696.592725][ T9859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.598355][T22564] usb 4-1: Manufacturer: syz [ 696.605196][ T9859] usb 5-1: Product: syz [ 696.613758][ T9859] usb 5-1: Manufacturer: syz [ 696.618035][T22564] usb 4-1: SerialNumber: syz [ 696.618839][ T9859] usb 5-1: SerialNumber: syz [ 696.679618][T22564] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 696.955194][ T9859] usb 5-1: 0:2 : does not exist [ 696.990453][ T9859] usb 5-1: USB disconnect, device number 31 [ 697.028830][T17512] usb 6-1: USB disconnect, device number 8 [ 697.045487][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 697.284835][T22564] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 697.296434][T22564] usb 4-1: ath9k_htc: Unable to allocate URBs [ 697.303337][T22564] usb 4-1: ath9k_htc: USB layer deinitialized 12:30:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x402, &(0x7f0000000140)=ANY=[]) 12:30:20 executing program 1: 12:30:20 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:20 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 697.547109][ T9859] usb 4-1: USB disconnect, device number 8 [ 697.621174][T24353] device lo entered promiscuous mode [ 697.634125][T24352] device lo left promiscuous mode [ 698.004779][T22564] usb 6-1: new high-speed USB device number 9 using dummy_hcd 12:30:21 executing program 3: keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x0}) 12:30:21 executing program 4: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "54ec1f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:30:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:21 executing program 1: 12:30:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 698.141091][T24368] device lo entered promiscuous mode [ 698.157353][T24363] device lo left promiscuous mode 12:30:21 executing program 1: 12:30:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 698.244945][T22564] usb 6-1: Using ep0 maxpacket: 32 [ 698.365547][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 698.373945][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 698.385206][T22566] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 698.427561][T24379] device lo entered promiscuous mode [ 698.436844][T24377] device lo left promiscuous mode [ 698.440637][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 698.469610][T22564] usb 6-1: config 1 has no interface number 0 [ 698.484565][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.511185][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 698.552351][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 698.572795][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.625050][T22566] usb 5-1: Using ep0 maxpacket: 8 [ 698.636300][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 698.744944][T22566] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 698.755442][T22566] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.764319][T22566] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 698.855333][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 698.935019][T22566] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.944292][T22566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.953923][T22566] usb 5-1: Product: syz [ 698.958987][T22566] usb 5-1: Manufacturer: syz [ 698.963697][T22566] usb 5-1: SerialNumber: syz [ 699.284879][T22566] usb 5-1: 0:2 : does not exist [ 699.312312][T22566] usb 5-1: USB disconnect, device number 32 [ 699.623258][T22566] usb 6-1: USB disconnect, device number 9 [ 699.645046][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 12:30:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 12:30:23 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:23 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 12:30:23 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:30:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:23 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000280)=0x8) write(r0, &(0x7f0000000000)="05", 0xe7b78) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21}, {0x0, 0x56, 0x1, 0x7, 0x0, 0x1, 0x0, 0x1000}, {0x8, 0x1ff, 0x5}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d4}, 0xa, @in6=@private2, 0x3500, 0x2, 0x1, 0x5d, 0x100, 0x0, 0x7fffffff}}, 0xe8) [ 700.235207][T24424] device lo entered promiscuous mode 12:30:23 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 700.267761][T24420] device lo left promiscuous mode 12:30:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) 12:30:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:30:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) pipe(0x0) [ 700.496290][T24439] device lo entered promiscuous mode [ 700.508722][T24437] device lo left promiscuous mode 12:30:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 700.576452][ T9859] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 700.824872][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 700.945650][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 700.954074][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 701.035070][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 701.100598][ T9859] usb 6-1: config 1 has no interface number 0 [ 701.127898][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.149618][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 701.163131][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 701.183263][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.247621][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 701.465412][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 701.673025][T22566] usb 6-1: USB disconnect, device number 10 [ 701.690765][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 12:30:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) 12:30:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:25 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000280)=0x8) write(r0, &(0x7f0000000000)="05", 0xe7b78) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21}, {0x0, 0x56, 0x1, 0x7, 0x0, 0x1, 0x0, 0x1000}, {0x8, 0x1ff, 0x5}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d4}, 0xa, @in6=@private2, 0x3500, 0x2, 0x1, 0x5d, 0x100, 0x0, 0x7fffffff}}, 0xe8) 12:30:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x4c, 0xd9f, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 12:30:25 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:30:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 702.257824][T24469] device lo entered promiscuous mode 12:30:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 702.282455][ T25] audit: type=1800 audit(1631277025.562:5): pid=24474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 702.287418][T24466] device lo left promiscuous mode 12:30:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fff00102e80a423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x40}}, 0x0) 12:30:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 702.543603][T24488] device lo entered promiscuous mode [ 702.558556][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 702.608720][T24486] device lo left promiscuous mode 12:30:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 702.676444][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 702.694869][T22564] usb 6-1: new high-speed USB device number 11 using dummy_hcd 12:30:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) [ 702.965979][T22564] usb 6-1: Using ep0 maxpacket: 32 [ 703.147652][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 703.156946][T24501] device lo entered promiscuous mode [ 703.167585][T24499] device lo left promiscuous mode [ 703.174560][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 703.183202][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 703.264572][T22564] usb 6-1: config 1 has no interface number 0 [ 703.270809][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 703.318811][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 703.333428][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 703.343886][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.407619][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 703.624678][T22564] snd_usb_pod 6-1:1.1: set_interface failed [ 703.631272][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 703.651940][T22564] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 703.661399][T22564] usb 6-1: USB disconnect, device number 11 12:30:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) 12:30:27 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:30:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fff00102e80a423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x40}}, 0x0) 12:30:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12:30:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 12:30:27 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000280)=0x8) write(r0, &(0x7f0000000000)="05", 0xe7b78) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21}, {0x0, 0x56, 0x1, 0x7, 0x0, 0x1, 0x0, 0x1000}, {0x8, 0x1ff, 0x5}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d4}, 0xa, @in6=@private2, 0x3500, 0x2, 0x1, 0x5d, 0x100, 0x0, 0x7fffffff}}, 0xe8) [ 704.202088][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 704.267589][T24525] device lo entered promiscuous mode [ 704.296754][T24519] device lo left promiscuous mode 12:30:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 12:30:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, 0x0, 0x0) 12:30:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 704.524746][T24539] device lo entered promiscuous mode [ 704.566626][T24538] device lo left promiscuous mode 12:30:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007340)=[{{&(0x7f00000003c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x80, 0x0}}], 0x1, 0x0) [ 704.604588][T17512] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 704.864909][T17512] usb 6-1: Using ep0 maxpacket: 32 [ 704.985296][T17512] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 704.993684][T17512] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 705.004804][T17512] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 705.013905][T17512] usb 6-1: config 1 has no interface number 0 [ 705.022123][T17512] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 705.035283][T17512] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 705.050010][T17512] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 705.061461][T17512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.107690][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 705.324524][T17512] snd_usb_pod 6-1:1.1: set_interface failed [ 705.330651][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 705.353804][T17512] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 705.363172][T17512] usb 6-1: USB disconnect, device number 12 12:30:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) 12:30:29 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x0, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) 12:30:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, 0x0, 0x0) 12:30:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)=ANY=[], 0x18}}, 0x0) 12:30:29 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) [ 705.913727][T24572] device lo entered promiscuous mode [ 705.953762][T24570] device lo left promiscuous mode 12:30:29 executing program 4: fsopen(&(0x7f000000a880)='bdev\x00', 0x0) 12:30:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12:30:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @random="1c2ffc010344"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, 0x0, 0x0) 12:30:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}}, 0x0) [ 706.114415][T22566] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 706.171695][T24586] device lo entered promiscuous mode 12:30:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) [ 706.195842][T24582] device lo left promiscuous mode [ 706.214600][T17512] usb 4-1: new high-speed USB device number 9 using dummy_hcd 12:30:29 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x200100, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) [ 706.284476][T13826] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 706.304596][T22566] usb 2-1: device descriptor read/64, error 18 [ 706.454415][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 706.564466][T13826] usb 6-1: Using ep0 maxpacket: 32 [ 706.576383][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.586908][T22566] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 706.603276][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.629941][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 706.653183][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 706.664061][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.725045][T13826] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 706.733428][T13826] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 706.767437][T13826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 706.775256][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 706.793393][T22566] usb 2-1: device descriptor read/64, error 18 [ 706.800565][T13826] usb 6-1: config 1 has no interface number 0 [ 706.809917][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 706.818527][T17512] usb 4-1: Manufacturer: syz [ 706.825003][T13826] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.826659][T17512] usb 4-1: config 0 descriptor?? [ 706.867111][T13826] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 706.883960][T13826] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 706.894799][T13826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.924509][T22566] usb usb2-port1: attempt power cycle [ 706.957027][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 707.144328][T17512] rc_core: IR keymap rc-hauppauge not found [ 707.150265][T17512] Registered IR keymap rc-empty [ 707.156173][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.182377][T13826] snd_usb_pod 6-1:1.1: set_interface failed [ 707.189310][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 707.194406][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.204896][T13826] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 707.223576][T13826] usb 6-1: USB disconnect, device number 13 [ 707.246329][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 707.268157][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 707.295614][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.334475][T22566] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 707.342415][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.374648][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.404538][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.434995][T22566] usb 2-1: Invalid ep0 maxpacket: 0 [ 707.440422][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.474437][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.514947][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.544331][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.574352][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.594322][T22566] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 707.604523][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.634244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 707.654239][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 707.661257][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 707.671465][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 12:30:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 707.680029][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 707.687436][T22566] usb 2-1: Invalid ep0 maxpacket: 0 [ 707.693240][T22566] usb usb2-port1: unable to enumerate USB device [ 707.699810][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 707.708995][T17512] usb 4-1: USB disconnect, device number 9 [ 707.715008][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 708.404320][T17512] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 708.644282][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 708.764289][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.775801][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 708.786894][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 708.796782][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 708.806622][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:30:32 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x0, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) 12:30:32 executing program 4: rt_sigsuspend(&(0x7f0000000140), 0x8) 12:30:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 12:30:32 executing program 0: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f000000c080)) [ 708.895023][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 708.909978][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 708.937778][T17512] usb 4-1: Manufacturer: syz [ 708.969476][T17512] usb 4-1: config 0 descriptor?? 12:30:32 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 12:30:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 12:30:32 executing program 0: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) 12:30:32 executing program 0: getpgrp(0x0) getpgid(0x0) fork() 12:30:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) [ 709.224671][T17512] rc_core: IR keymap rc-hauppauge not found [ 709.234510][T17512] Registered IR keymap rc-empty [ 709.264384][T13826] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 709.268542][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) [ 709.344249][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0xa, 0x2, 0x0, @private0, 0x7f}, 0x1c, 0x0}, 0x0) [ 709.385447][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 709.407520][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 709.474477][T13826] usb 2-1: device descriptor read/64, error 18 [ 709.488018][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.504277][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.524186][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.544124][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.550179][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.564133][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.584149][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.594340][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.604131][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.624111][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.644131][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.654252][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.664342][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.684125][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.704112][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.714372][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.724147][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.744343][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.750998][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.764338][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.784103][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.784355][T13826] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 709.804153][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.824161][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.830281][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.844139][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.864101][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.870075][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.884127][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.904096][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.910938][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.924127][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.944113][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.950109][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.964129][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.984211][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 709.991310][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 709.999902][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 710.008384][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 710.024094][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 710.044174][T13826] usb 2-1: device descriptor read/64, error 18 [ 710.044188][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 710.064163][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 710.084134][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 710.090228][T17512] usb 4-1: USB disconnect, device number 10 [ 710.184547][T13826] usb usb2-port1: attempt power cycle [ 710.484166][T17512] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 710.614159][T13826] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 710.724189][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 710.725074][T13826] usb 2-1: Invalid ep0 maxpacket: 0 [ 710.844838][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.860274][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.871420][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.886516][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.896986][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.904101][T13826] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 710.994465][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.004806][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.004854][T13826] usb 2-1: Invalid ep0 maxpacket: 0 [ 711.013081][T17512] usb 4-1: Manufacturer: syz [ 711.028523][T13826] usb usb2-port1: unable to enumerate USB device [ 711.029826][T17512] usb 4-1: config 0 descriptor?? [ 711.404119][T17512] rc_core: IR keymap rc-hauppauge not found [ 711.410630][T17512] Registered IR keymap rc-empty [ 711.417669][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.464423][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.505285][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 711.521878][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 711.546487][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.595632][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.624163][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.666776][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.704094][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.737191][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.775957][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.814250][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.854171][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.885586][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.904132][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 711.924082][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x0, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) 12:30:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 12:30:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:30:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed00540000000000a3c13e2000000001010000000000db00"}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 711.931255][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 711.946368][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 711.954883][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 711.974064][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 712.004027][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 712.021504][T17512] usb 4-1: USB disconnect, device number 11 [ 712.027775][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:35 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x232202) 12:30:35 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) 12:30:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 12:30:35 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) [ 712.454146][T17507] usb 2-1: new high-speed USB device number 17 using dummy_hcd 12:30:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 12:30:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) 12:30:35 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:35 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x201) [ 712.682024][T17507] usb 2-1: device descriptor read/64, error 18 [ 712.884149][T17512] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 712.975885][T17507] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 713.124016][T13826] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 713.164157][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 713.192433][T17507] usb 2-1: device descriptor read/64, error 18 [ 713.294923][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.305197][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.318203][T17507] usb usb2-port1: attempt power cycle [ 713.323788][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 713.335009][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 713.346055][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.364179][T13826] usb 6-1: Using ep0 maxpacket: 32 [ 713.445147][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 713.455944][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 713.466307][T17512] usb 4-1: Manufacturer: syz [ 713.472912][T17512] usb 4-1: config 0 descriptor?? [ 713.491308][T13826] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 713.501599][T13826] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 713.521212][T13826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 713.530646][T13826] usb 6-1: config 1 has no interface number 0 [ 713.537207][T13826] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.548547][T13826] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 713.562638][T13826] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 713.572762][T13826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.637191][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 713.744128][T17507] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 713.843957][T17512] rc_core: IR keymap rc-hauppauge not found [ 713.849906][T17512] Registered IR keymap rc-empty [ 713.854713][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 713.863133][T17507] usb 2-1: Invalid ep0 maxpacket: 0 [ 713.874412][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.904097][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.939396][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 713.964526][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 713.985129][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.014443][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.021684][T17507] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 714.054142][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.063976][ T9859] usb 6-1: USB disconnect, device number 14 [ 714.083947][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 714.104635][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.134120][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.154238][T17507] usb 2-1: Invalid ep0 maxpacket: 0 [ 714.159786][T17507] usb usb2-port1: unable to enumerate USB device [ 714.166788][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.204153][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.244146][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.274354][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.304470][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.333956][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 714.341730][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 714.353913][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 714.363948][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 714.373919][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 714.394025][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 714.401078][T17512] usb 4-1: USB disconnect, device number 12 12:30:38 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x40, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) 12:30:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0xa, 0x2, 0x0, @private0}, 0x1c, 0x0}, 0x0) 12:30:38 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000000580)=[{0x28, 0x0, 0x0, "3c9bbdcc5fe2e4cbb4c13587233d7e9b81"}], 0x28}}], 0x1, 0x0) 12:30:38 executing program 0: socketpair(0xa, 0x3, 0x6, 0x0) 12:30:38 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:38 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000001340)) 12:30:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) 12:30:38 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000040)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000000580)=[{0x28, 0x0, 0x0, "3c9bbdcc5fe2e4cbb4c13587233d7e9b81"}], 0x28}}], 0x1, 0x0) 12:30:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}, 0x0) [ 715.424164][ T9859] usb 4-1: new high-speed USB device number 13 using dummy_hcd 12:30:38 executing program 2: syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x800) 12:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x9890d1b7bb77b6fa}, 0xc, &(0x7f0000001780)={0x0}}, 0x0) [ 715.512662][T17507] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 715.513847][T13826] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 715.674017][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 715.794065][T17507] usb 6-1: Using ep0 maxpacket: 32 [ 715.800293][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.820572][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.843529][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 715.862794][ T9859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 715.897373][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.926364][T17507] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 715.936138][T17507] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 715.941515][T13826] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 715.956170][T17507] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 715.961965][T13826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.973119][T17507] usb 6-1: config 1 has no interface number 0 [ 715.977854][T13826] usb 2-1: config 0 descriptor?? [ 715.994826][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 716.000075][T17507] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.006107][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 716.033058][T17507] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 716.036770][ T9859] usb 4-1: Manufacturer: syz [ 716.063062][ T9859] usb 4-1: config 0 descriptor?? [ 716.066102][T17507] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 716.102428][T17507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.207132][T17507] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 716.237281][T22566] usb 2-1: USB disconnect, device number 21 [ 716.383856][ T9859] rc_core: IR keymap rc-hauppauge not found [ 716.389784][ T9859] Registered IR keymap rc-empty [ 716.400728][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.414635][T17507] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 716.453990][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.484792][ T9859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 716.507629][ T9859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 716.537297][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.574128][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.603974][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.628147][T13805] usb 6-1: USB disconnect, device number 15 [ 716.635561][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.643647][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 716.683947][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.714687][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:40 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x83, 0xc5, 0xca, 0x40, 0x1ac7, 0x1, 0xe76f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x14, 0x23}}]}}]}}, 0x0) 12:30:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@private2}, 0x14) 12:30:40 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) 12:30:40 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getcwd(&(0x7f0000000100)=""/191, 0xbf) [ 716.743857][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.783361][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.836373][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.873843][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 716.879916][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.893761][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 716.913763][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 716.933742][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 716.953738][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 716.963509][ T9859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 716.973733][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 716.991431][ T9859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 717.000013][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 717.013739][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 717.033757][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 717.053800][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 717.066155][ T9859] usb 4-1: USB disconnect, device number 13 [ 717.074788][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:30:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 717.233858][T13805] usb 2-1: new high-speed USB device number 22 using dummy_hcd 12:30:40 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 12:30:40 executing program 4: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) 12:30:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0xc6a5301292a08bc4}, 0x4) 12:30:40 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) 12:30:40 executing program 0: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) [ 717.543959][T22566] usb 6-1: new high-speed USB device number 16 using dummy_hcd 12:30:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}}, 0x0) [ 717.604612][T13805] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=e7.6f [ 717.626913][T13805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:30:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000700)=@req3={0x0, 0x0, 0x0, 0x5}, 0x1c) [ 717.688524][T13805] usb 2-1: config 0 descriptor?? [ 717.823834][T22566] usb 6-1: Using ep0 maxpacket: 32 [ 717.913897][T17507] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 717.952969][T17512] usb 2-1: USB disconnect, device number 22 [ 717.960847][T22566] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 717.972654][T22566] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 717.992721][T22566] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 718.003758][T22566] usb 6-1: config 1 has no interface number 0 [ 718.010240][T22566] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.023947][T22566] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 718.040514][T22566] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 718.051647][T22566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.126790][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 718.185432][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 718.334967][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.346157][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 718.363021][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.376235][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 718.387585][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 718.398806][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:30:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f00000001c0)="dd5a75ad5cf8dd821942c5c12a2e1143", 0x10, 0x0, 0x0, 0x0) 12:30:41 executing program 4: syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x80080) 12:30:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 12:30:41 executing program 1: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f000000c080)) [ 718.504172][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.534538][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.579538][T17507] usb 4-1: Manufacturer: syz [ 718.608487][T22566] usb 6-1: USB disconnect, device number 16 [ 718.620746][T17507] usb 4-1: config 0 descriptor?? [ 718.642529][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 718.993793][T17507] rc_core: IR keymap rc-hauppauge not found [ 718.999739][T17507] Registered IR keymap rc-empty [ 719.006216][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.033763][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:42 executing program 2: socket$inet(0x2, 0x0, 0xffffffff) [ 719.089619][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 719.130375][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 719.169205][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.193723][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.213664][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.219742][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.243627][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.256261][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.263656][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.283643][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.289752][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.303636][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.323624][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.333710][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.343728][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.373689][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.387591][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.394913][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.413773][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.433702][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.439738][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.453616][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.473629][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.493653][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.499626][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.523625][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.533803][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.543621][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.573648][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.579540][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.603627][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.623654][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.630467][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 719.638551][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 719.647078][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:43 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 12:30:43 executing program 4: socket$inet6(0xa, 0x0, 0x14000) 12:30:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000740)={'ip6gre0\x00', 0x0}) 12:30:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000700)=@req3={0x0, 0x8}, 0x1c) 12:30:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:43 executing program 2: getpgrp(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fork() [ 719.663642][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 719.676320][T17507] usb 4-1: USB disconnect, device number 14 12:30:43 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_print_times', 0x400, 0x0) 12:30:43 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) 12:30:43 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000040)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) 12:30:43 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 12:30:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000080)) 12:30:43 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f000000c040), 0xffffffffffffffff) [ 720.073629][ T9859] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 720.281624][T17507] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 720.323693][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 720.446149][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 720.467677][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 720.489393][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 720.526916][ T9859] usb 6-1: config 1 has no interface number 0 [ 720.533185][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.544508][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 720.554014][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 720.558019][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 720.572120][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.616551][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 720.706206][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.716913][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.732056][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.743036][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.753883][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.834205][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 720.854783][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 720.864108][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 720.872364][T17507] usb 4-1: Manufacturer: syz [ 720.885250][T17507] usb 4-1: config 0 descriptor?? [ 721.041008][ T9859] usb 6-1: USB disconnect, device number 17 [ 721.053911][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 721.213654][T17507] rc_core: IR keymap rc-hauppauge not found [ 721.219856][T17507] Registered IR keymap rc-empty [ 721.230238][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.264608][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.302121][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 721.335398][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 721.388591][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.403545][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.423561][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.433688][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.443544][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.463527][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.469489][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.483597][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.503658][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.510050][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.523544][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.543622][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.549968][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.563542][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.583591][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.591467][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.603529][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.623597][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.629571][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.643539][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.663578][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.669539][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.683548][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.703562][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.709538][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.723564][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.743591][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.749610][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 721.763535][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.783634][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.790953][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 721.799135][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.807618][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 721.816083][T17507] usb 4-1: USB disconnect, device number 15 [ 721.823912][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:45 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 12:30:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) 12:30:45 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f000000c340), 0x0, 0x0) 12:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000001440)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xe84, 0x5, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf21d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2b0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6d4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x74c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x418, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff00}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7c0}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x52}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}]}, 0xec4}}, 0x0) 12:30:45 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003f40)={'tunl0\x00', &(0x7f0000003e40)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 12:30:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000001440)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xe84, 0x5, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf21d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2b0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6d4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x74c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x418, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff00}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7c0}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x52}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}]}, 0xec4}}, 0x0) 12:30:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) 12:30:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000140)={'team_slave_0\x00', @ifru_addrs=@qipcrtr}) 12:30:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x88, 0x0, &(0x7f0000000140)={@private, @remote}, 0xc) [ 722.343616][T17507] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 722.583516][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 722.703682][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.717426][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 722.758904][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 722.794046][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 722.805585][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.894411][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 722.903622][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 722.911972][T17507] usb 4-1: Manufacturer: syz [ 722.919576][T17507] usb 4-1: config 0 descriptor?? [ 723.223665][T17507] rc_core: IR keymap rc-hauppauge not found [ 723.229678][T17507] Registered IR keymap rc-empty [ 723.239879][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.278704][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.317830][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 723.342619][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 723.371142][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.403480][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.413969][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.423637][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.443431][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.449360][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.463470][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.483487][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.490110][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.503456][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.523439][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.543448][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.549434][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.563438][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.583520][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.589470][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.603438][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.623449][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.629492][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.643435][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.663555][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.669671][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.683457][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.703445][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.709603][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.723444][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.743502][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.754213][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.763681][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.783475][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.792402][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 723.803434][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 723.809368][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 723.822645][T17507] usb 4-1: USB disconnect, device number 16 [ 723.828790][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:47 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) 12:30:47 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0) 12:30:47 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:47 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:47 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:47 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) 12:30:47 executing program 4: r0 = syz_io_uring_setup(0x5ba3, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x6b4e, &(0x7f0000000300)={0x0, 0x5505}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) 12:30:47 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:47 executing program 0: clone3(&(0x7f00000012c0)={0x101020400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:30:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:47 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:47 executing program 4: socketpair(0xfb09af26e977d338, 0x0, 0x0, &(0x7f0000000000)) [ 724.395210][T17507] usb 4-1: new high-speed USB device number 17 using dummy_hcd 12:30:47 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:47 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 724.633735][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 724.766948][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.791048][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 724.828490][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 724.849715][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 724.862745][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.964323][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 724.983945][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 724.991985][T17507] usb 4-1: Manufacturer: syz [ 725.007107][T17507] usb 4-1: config 0 descriptor?? 12:30:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:30:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:50 executing program 0: clone3(&(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:30:50 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:50 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:50 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:50 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) 12:30:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) [ 727.203411][T17507] rc_core: IR keymap rc-hauppauge not found [ 727.210900][T17507] Registered IR keymap rc-empty [ 727.237125][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) [ 727.293624][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.334402][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 12:30:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x0) [ 727.387974][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 12:30:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) [ 727.453384][ T9859] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 727.453901][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.473251][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.493239][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:50 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) [ 727.513274][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.533315][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.553241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.573373][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.593223][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.599457][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.613244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.633291][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.643313][ T9859] usb 6-1: device descriptor read/64, error 18 [ 727.653261][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.659696][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.673266][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x13, 0x0, &(0x7f0000000540)) [ 727.693250][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.699251][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.713260][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.733252][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:30:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) [ 727.739237][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.753257][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.773237][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.779329][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.793217][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.813220][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.819463][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.833227][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.853233][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.859284][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.873232][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.893234][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.899639][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.913269][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.933241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.934991][ T9859] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 727.939672][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 727.954034][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.973234][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 727.993200][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 728.001169][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 728.013208][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 728.023912][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 728.033315][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 728.053252][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 728.065819][T17507] usb 4-1: USB disconnect, device number 17 [ 728.073208][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 728.175946][ T9859] usb 6-1: device descriptor read/64, error 18 [ 728.293648][ T9859] usb usb6-port1: attempt power cycle [ 728.463482][T17507] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 728.703708][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 728.723323][ T9859] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 728.823778][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.834114][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.846913][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.857531][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 728.868095][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.903405][ T9859] usb 6-1: device descriptor read/8, error -61 [ 728.953300][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 728.963017][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 728.971443][T17507] usb 4-1: Manufacturer: syz [ 728.984634][T17507] usb 4-1: config 0 descriptor?? [ 729.193418][ T9859] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 729.373352][ T9859] usb 6-1: device descriptor read/8, error -61 [ 729.505225][ T9859] usb usb6-port1: unable to enumerate USB device 12:30:53 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:53 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:30:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:53 executing program 0: sysfs$2(0x2, 0x7f, 0x0) 12:30:53 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:53 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x80000000}, 0x0) 12:30:53 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:53 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) [ 730.403208][T17507] rc_core: IR keymap rc-hauppauge not found [ 730.409159][T17507] Registered IR keymap rc-empty [ 730.431897][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:53 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) [ 730.513375][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.553872][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 730.568118][T22566] usb 6-1: new high-speed USB device number 22 using dummy_hcd 12:30:53 executing program 0: syz_io_uring_setup(0x54e1, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 12:30:53 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) [ 730.638959][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 730.740505][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.753084][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.773172][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.779070][T22566] usb 6-1: device descriptor read/64, error 18 [ 730.793093][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.813093][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.823372][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.833097][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.853104][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.859224][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.873087][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.893189][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.899327][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.913080][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.933086][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.939714][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.953092][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.973073][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 730.979278][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 730.993079][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.013185][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.019114][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 731.033067][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.053073][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.059457][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 731.067564][T22566] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 731.075280][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.093083][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.099198][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 731.113067][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.133203][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.139416][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 731.153078][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.173067][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.180268][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 731.193136][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.199272][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 731.213120][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.226893][T17507] usb 4-1: USB disconnect, device number 18 [ 731.233104][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 731.273384][T22566] usb 6-1: device descriptor read/64, error 18 [ 731.393414][T22566] usb usb6-port1: attempt power cycle [ 731.643249][T17507] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 731.803120][T22566] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 731.883065][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 731.973878][T22566] usb 6-1: device descriptor read/8, error -61 [ 732.003239][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.013517][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.024892][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 732.035348][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 732.046161][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.133667][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 732.142727][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 732.153874][T17507] usb 4-1: Manufacturer: syz [ 732.160644][T17507] usb 4-1: config 0 descriptor?? [ 732.243147][T22566] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 732.413221][T22566] usb 6-1: device descriptor read/8, error -61 [ 732.535109][T22566] usb usb6-port1: unable to enumerate USB device 12:30:56 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:56 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:30:56 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 12:30:56 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:30:56 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000480)="99", 0x1) 12:30:56 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:56 executing program 0: move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000100), 0x0) 12:30:56 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) [ 733.613395][T17507] rc_core: IR keymap rc-hauppauge not found [ 733.620188][T17507] Registered IR keymap rc-empty [ 733.628875][T22566] usb 6-1: new high-speed USB device number 26 using dummy_hcd 12:30:56 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 12:30:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 733.655254][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.723197][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:30:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8923, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) [ 733.763752][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 12:30:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) [ 733.824933][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input40 [ 733.843082][T22566] usb 6-1: device descriptor read/64, error 18 [ 733.903241][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.922971][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 733.942932][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 733.962925][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 733.982973][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 733.989493][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.002920][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.022925][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.042939][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.049479][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.063112][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.082918][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.093068][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.102919][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.113012][T22566] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 734.122903][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.129096][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.142942][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.162911][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.168961][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.182932][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.202922][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.209029][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.222911][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.242893][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.249011][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.262915][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.282918][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.288960][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.302933][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.322892][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.328959][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.336440][T22566] usb 6-1: device descriptor read/64, error 18 [ 734.342908][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.362888][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.374242][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 734.382309][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 734.390841][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.402908][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.422923][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.433580][T17507] usb 4-1: USB disconnect, device number 19 [ 734.442883][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 734.453613][T22566] usb usb6-port1: attempt power cycle [ 734.863084][T22566] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 735.032992][T22566] usb 6-1: device descriptor read/8, error -61 [ 735.302968][T22566] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 735.473096][T22566] usb 6-1: device descriptor read/8, error -61 [ 735.593538][T22566] usb usb6-port1: unable to enumerate USB device 12:30:59 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:30:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:30:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 12:30:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x3, 0x0, &(0x7f0000000540)) 12:30:59 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:30:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:30:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 12:30:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:30:59 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={0xffffffffffffffff, 0x24, 0x1, 0x0, 0x0}, 0x20) 12:30:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:30:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xa0, &(0x7f0000000080)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:30:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 736.713030][T17512] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 736.932941][T17512] usb 6-1: device descriptor read/64, error 18 [ 737.213021][T17512] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 737.412903][T17512] usb 6-1: device descriptor read/64, error 18 [ 737.553206][T17512] usb usb6-port1: attempt power cycle [ 737.982846][T17512] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 738.152925][T17512] usb 6-1: device descriptor read/8, error -61 [ 738.422776][T17512] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 738.603019][T17512] usb 6-1: device descriptor read/8, error -61 [ 738.725454][T17512] usb usb6-port1: unable to enumerate USB device 12:31:02 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 12:31:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8934, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:02 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:31:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 12:31:02 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x9, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 12:31:02 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:31:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 12:31:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 12:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8916, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:03 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 739.742735][T17512] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 739.992816][T17512] usb 6-1: device descriptor read/64, error 18 [ 740.262798][T17512] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 740.463449][T17512] usb 6-1: device descriptor read/64, error 18 [ 740.583437][T17512] usb usb6-port1: attempt power cycle [ 740.992594][T17512] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 741.163394][T17512] usb 6-1: device descriptor read/8, error -61 [ 741.432671][T17512] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 741.602679][T17512] usb 6-1: device descriptor read/8, error -61 [ 741.723570][T17512] usb usb6-port1: unable to enumerate USB device 12:31:05 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 12:31:05 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000640), &(0x7f0000000540)=0x9c) 12:31:05 executing program 2: socket(0x28, 0x5, 0x0) 12:31:05 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:05 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 12:31:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6cb, &(0x7f00000000c0)=0x800, 0x4) 12:31:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, &(0x7f0000000540)) 12:31:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 12:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8901, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, &(0x7f0000000540)) 12:31:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) [ 742.932757][T13826] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 743.132679][T13826] usb 6-1: device descriptor read/64, error 18 [ 743.412620][T13826] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 743.622591][T13826] usb 6-1: device descriptor read/64, error 18 [ 743.754326][T13826] usb usb6-port1: attempt power cycle [ 744.162466][T13826] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 744.392558][T13826] usb 6-1: device descriptor read/8, error -61 [ 744.672492][T13826] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 744.872562][T13826] usb 6-1: device descriptor read/8, error -61 [ 745.003243][T13826] usb usb6-port1: unable to enumerate USB device 12:31:08 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d500000001090208"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) 12:31:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, &(0x7f0000000540)) 12:31:08 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 12:31:08 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 12:31:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), 0x0) 12:31:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) 12:31:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), 0x0) 12:31:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) [ 746.072424][ T9859] usb 6-1: new high-speed USB device number 42 using dummy_hcd 12:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) [ 746.333861][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 746.454629][ T9859] usb 6-1: config 0 has no interfaces? [ 746.460177][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 746.490870][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.510260][ T9859] usb 6-1: config 0 descriptor?? [ 746.863684][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.870100][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 12:31:12 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d500000001090208"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000640), 0x0) 12:31:12 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 12:31:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) 12:31:12 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 748.770841][T17512] usb 6-1: USB disconnect, device number 42 12:31:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @dev}}}}) 12:31:12 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) 12:31:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 12:31:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 12:31:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:12 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) [ 749.352281][T17512] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 749.612230][T17512] usb 6-1: Using ep0 maxpacket: 32 [ 749.738993][T17512] usb 6-1: config 0 has no interfaces? [ 749.744866][T17512] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 749.769485][T17512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.793996][T17512] usb 6-1: config 0 descriptor?? 12:31:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d500000001090208"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) 12:31:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 12:31:15 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x6, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x61, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 751.935869][T17507] usb 6-1: USB disconnect, device number 43 12:31:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b1, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x80000001, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80012007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:31:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) 12:31:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:15 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0f00000000000000686600000900010066"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x675dec60, 0x0) [ 752.322319][T17512] usb 4-1: new high-speed USB device number 20 using dummy_hcd 12:31:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x80000001, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80012007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 752.471345][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 752.517446][T17512] usb 4-1: device descriptor read/64, error 18 [ 752.526942][T25660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 752.603755][T17507] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 752.812235][T17512] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 752.863496][T17507] usb 6-1: Using ep0 maxpacket: 32 [ 753.011061][T17507] usb 6-1: config 0 has no interfaces? [ 753.016709][T17507] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 753.032053][T17512] usb 4-1: device descriptor read/64, error 18 [ 753.052443][T17507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.076891][T17507] usb 6-1: config 0 descriptor?? [ 753.152576][T17512] usb usb4-port1: attempt power cycle [ 753.562102][T17512] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 753.742215][T17512] usb 4-1: device descriptor read/8, error -61 [ 754.012102][T17512] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 754.182943][T17512] usb 4-1: device descriptor read/8, error -61 [ 754.302490][T17512] usb usb4-port1: unable to enumerate USB device 12:31:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x21153, r0}, 0x78) 12:31:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x40) 12:31:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x80000001, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80012007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:31:18 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0f00000000000000686600000900010066"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x675dec60, 0x0) 12:31:18 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c0100000009040100"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 755.080369][T13805] usb 6-1: USB disconnect, device number 44 [ 755.163080][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:31:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x80000001, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80012007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:31:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8921, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8948, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:18 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0f00000000000000686600000900010066"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x675dec60, 0x0) [ 755.416331][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:31:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x2) [ 755.492111][T22566] usb 4-1: new high-speed USB device number 24 using dummy_hcd 12:31:18 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0f00000000000000686600000900010066"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x675dec60, 0x0) 12:31:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x40000, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="1107000000000000000008000000080003", @ANYRES32, @ANYBLOB="93c2982742af4b2a4d2f250ccb82098cc8ce2c"], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x3}, 0x0, 0x0, &(0x7f0000000540)={0x1, 0x3, 0x3a3, 0x8}, &(0x7f0000000580)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=0x4}}, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='lock_acquire\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x8, &(0x7f0000000840)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x2d}, @func={0x85, 0x0, 0x1, 0x0, 0xffffeffc}, @ldst={0x2, 0x280c236d3fa74b53, 0x3, 0xb, 0x2, 0x0, 0x10}, @alu={0x7, 0x1, 0x9, 0x9, 0x0, 0x4, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x0, 0x5, 0x8, 0xfffffffffffffff4, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0x9, &(0x7f0000000400)=""/9, 0x41100, 0x11, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x7, 0xfffffffa}, 0x10, r6, r7}, 0x78) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00e42ef10000000400080d000000"], 0xfffffdef}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b0", @ANYRES32=r4, @ANYRESDEC], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002a00000429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="09000a010000000000008000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4a020) [ 755.691961][T13805] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 755.692169][T22566] usb 4-1: device descriptor read/64, error 18 12:31:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) [ 755.733806][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 755.932186][T13805] usb 6-1: Using ep0 maxpacket: 32 [ 755.991943][T22566] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 756.052764][T13805] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 756.067040][T13805] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 756.078146][T13805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.089912][T13805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 756.100390][T13805] usb 6-1: config 1 has no interface number 0 [ 756.108507][T13805] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 756.119543][T13805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.175177][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 756.211913][T22566] usb 4-1: device descriptor read/64, error 18 [ 756.342646][T22566] usb usb4-port1: attempt power cycle [ 756.392127][T13805] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 756.400398][T13805] snd_usb_pod 6-1:1.1: invalid control EP [ 756.418054][T13805] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 756.429753][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 756.445557][T13805] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 756.606812][T13826] usb 6-1: USB disconnect, device number 45 [ 756.781883][T22566] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 756.971986][T22566] usb 4-1: device descriptor read/8, error -61 [ 757.241897][T22566] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 757.411990][T22566] usb 4-1: device descriptor read/8, error -61 [ 757.532886][T22566] usb usb4-port1: unable to enumerate USB device 12:31:21 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000180)=@raw=[@alu], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x78) 12:31:21 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c0100000009040100"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x37}}}}}) 12:31:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8913, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8983, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:21 executing program 1: socket(0x2, 0x3, 0x7) 12:31:21 executing program 4: r0 = socket(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 12:31:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8915, &(0x7f0000000100)={'tunl0\x00', 0x0}) [ 758.491954][T13826] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 758.572014][T13805] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 758.741905][T13826] usb 6-1: Using ep0 maxpacket: 32 [ 758.781918][T13805] usb 4-1: device descriptor read/64, error 18 [ 758.891960][T13826] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 758.900528][T13826] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 758.924079][T13826] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.935763][T13826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 758.959209][T13826] usb 6-1: config 1 has no interface number 0 [ 758.979718][T13826] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 759.007967][T13826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.054883][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 759.071774][T13805] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 759.261864][T13826] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 759.270140][T13826] snd_usb_pod 6-1:1.1: invalid control EP [ 759.276151][T13826] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 759.283068][T13826] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 759.290808][T13826] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 759.297868][T13805] usb 4-1: device descriptor read/64, error 18 [ 759.432059][T13805] usb usb4-port1: attempt power cycle [ 759.468332][T13826] usb 6-1: USB disconnect, device number 46 [ 759.861767][T13805] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 760.072786][T13805] usb 4-1: device descriptor read/8, error -61 [ 760.352091][T13805] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 760.531894][T13805] usb 4-1: device descriptor read/8, error -61 [ 760.661869][T13805] usb usb4-port1: unable to enumerate USB device 12:31:24 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8903, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:24 executing program 4: r0 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={0x0}}, 0x0) 12:31:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x800, 0x4) 12:31:24 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c0100000009040100"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:24 executing program 0: r0 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) 12:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8982, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 12:31:24 executing program 4: r0 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={0x0}}, 0x0) 12:31:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x7, &(0x7f0000000340)=@framed={{}, [@func, @func, @map_val]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f0000000100)={'tunl0\x00', 0x0}) [ 761.582259][T22566] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 761.812429][T13805] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 761.873190][T22566] usb 6-1: Using ep0 maxpacket: 32 [ 761.992540][T22566] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 762.011601][T22566] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 762.020243][T22566] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.033141][T22566] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 762.039080][T13805] usb 4-1: device descriptor read/64, error 18 [ 762.044183][T22566] usb 6-1: config 1 has no interface number 0 [ 762.056244][T22566] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 762.066630][T22566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.114587][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 762.331871][T22566] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 762.340120][T22566] snd_usb_pod 6-1:1.1: invalid control EP [ 762.351721][T13805] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 762.357366][T22566] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 762.370838][T22566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 762.378854][T22566] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 762.541173][ T9859] usb 6-1: USB disconnect, device number 47 [ 762.547389][T13805] usb 4-1: device descriptor read/64, error 18 [ 762.672070][T13805] usb usb4-port1: attempt power cycle [ 763.113392][T13805] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 763.311791][T13805] usb 4-1: device descriptor read/8, error -61 [ 763.591617][T13805] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 763.762131][T13805] usb 4-1: device descriptor read/8, error -61 [ 763.882618][T13805] usb usb4-port1: unable to enumerate USB device 12:31:27 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:27 executing program 4: r0 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={0x0}}, 0x0) 12:31:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}}}}}) 12:31:27 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "18715225511bbbcfa2322e2b9b9d96faa61562cb7710d11081d837c96ed0c1a9", "bb96d09c6dce72f6a09cd465b18ff75635f884b547d2332fbccc05fdd822db62b88d168ce0d40c5bb5c9af16784a1a51", "f39cf4f1b59c56f16932e3bd72109f019e2a7c2f03741c0ca809530c", {"2e20a8f4de770a69589c6d2b80c218aa", "969a01f6bc7651c17ea7c896a6884d7c"}}}}}}}, 0x0) 12:31:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0x9f01, 0x0, 0x80000000, 0x0, 0x1}, 0x40) 12:31:27 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() sendmsg$netlink(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x40}, 0x0) 12:31:27 executing program 4: r0 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={0x0}}, 0x0) 12:31:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:27 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "18715225511bbbcfa2322e2b9b9d96faa61562cb7710d11081d837c96ed0c1a9", "bb96d09c6dce72f6a09cd465b18ff75635f884b547d2332fbccc05fdd822db62b88d168ce0d40c5bb5c9af16784a1a51", "f39cf4f1b59c56f16932e3bd72109f019e2a7c2f03741c0ca809530c", {"2e20a8f4de770a69589c6d2b80c218aa", "969a01f6bc7651c17ea7c896a6884d7c"}}}}}}}, 0x0) 12:31:28 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 12:31:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) [ 764.831688][ T1735] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 764.871740][T17512] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 765.067938][T17512] usb 4-1: device descriptor read/64, error 18 [ 765.101560][ T1735] usb 6-1: Using ep0 maxpacket: 32 [ 765.222356][ T1735] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 765.230851][ T1735] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 765.242390][ T1735] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.254129][ T1735] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 765.264347][ T1735] usb 6-1: config 1 has no interface number 0 [ 765.273221][ T1735] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 765.287350][ T1735] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 765.296800][ T1735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.341507][T17512] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 765.364822][ T1735] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 765.531484][T17512] usb 4-1: device descriptor read/64, error 18 [ 765.592081][ T1735] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 765.600284][ T1735] snd_usb_pod 6-1:1.1: invalid control EP [ 765.606554][ T1735] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 765.613531][ T1735] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 765.621173][ T1735] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 765.651832][T17512] usb usb4-port1: attempt power cycle [ 765.800095][T17507] usb 6-1: USB disconnect, device number 48 [ 766.061597][T17512] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 766.231626][T17512] usb 4-1: device descriptor read/8, error -61 [ 766.501436][T17512] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 766.681983][T17512] usb 4-1: device descriptor read/8, error -61 [ 766.811864][T17512] usb usb4-port1: unable to enumerate USB device 12:31:30 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8994, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:30 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "18715225511bbbcfa2322e2b9b9d96faa61562cb7710d11081d837c96ed0c1a9", "bb96d09c6dce72f6a09cd465b18ff75635f884b547d2332fbccc05fdd822db62b88d168ce0d40c5bb5c9af16784a1a51", "f39cf4f1b59c56f16932e3bd72109f019e2a7c2f03741c0ca809530c", {"2e20a8f4de770a69589c6d2b80c218aa", "969a01f6bc7651c17ea7c896a6884d7c"}}}}}}}, 0x0) 12:31:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8911, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x9, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x21153, r0}, 0x78) 12:31:30 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8971, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:31 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "18715225511bbbcfa2322e2b9b9d96faa61562cb7710d11081d837c96ed0c1a9", "bb96d09c6dce72f6a09cd465b18ff75635f884b547d2332fbccc05fdd822db62b88d168ce0d40c5bb5c9af16784a1a51", "f39cf4f1b59c56f16932e3bd72109f019e2a7c2f03741c0ca809530c", {"2e20a8f4de770a69589c6d2b80c218aa", "969a01f6bc7651c17ea7c896a6884d7c"}}}}}}}, 0x0) 12:31:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) 12:31:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0x0, 0x4}, 0x40) [ 767.931453][T13805] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 768.001463][ T1735] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 768.171768][T13805] usb 6-1: Using ep0 maxpacket: 32 [ 768.201520][ T1735] usb 4-1: device descriptor read/64, error 18 [ 768.291446][T13805] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 768.299991][T13805] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 768.311884][T13805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.324862][T13805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 768.335286][T13805] usb 6-1: config 1 has no interface number 0 [ 768.350256][T13805] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 768.379973][T13805] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 768.390245][T13805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.434241][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 768.481493][ T1735] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 768.641488][T13805] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 768.650499][T13805] snd_usb_pod 6-1:1.1: invalid control EP [ 768.668754][T13805] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 768.675457][ T1735] usb 4-1: device descriptor read/64, error 18 [ 768.681789][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 768.689350][T13805] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 768.811898][ T1735] usb usb4-port1: attempt power cycle [ 768.859587][T22566] usb 6-1: USB disconnect, device number 49 [ 769.221422][ T1735] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 769.391450][ T1735] usb 4-1: device descriptor read/8, error -61 [ 769.661319][ T1735] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 769.853055][ T1735] usb 4-1: device descriptor read/8, error -61 [ 769.972816][ T1735] usb usb4-port1: unable to enumerate USB device 12:31:34 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x800, 0x9}, 0x40) 12:31:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, 0x0) 12:31:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 12:31:34 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x7, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func, @map_val]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6ca, &(0x7f00000000c0)=0x800, 0x4) 12:31:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000180)=@framed={{}, [@call]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8953, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 771.113311][ T9859] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 771.131491][T17507] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 771.361380][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 771.382718][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 771.482814][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 771.497541][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 771.501490][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.515763][ T9859] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.517435][T17507] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.536979][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 771.546291][ T9859] usb 6-1: config 1 has no interface number 0 [ 771.554829][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 771.567853][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 771.578611][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.611319][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 771.621295][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 771.629550][T17507] usb 4-1: Manufacturer: syz [ 771.631940][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 771.650273][T17507] usb 4-1: config 0 descriptor?? [ 771.841491][ T9859] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 771.849917][ T9859] snd_usb_pod 6-1:1.1: invalid control EP [ 771.856217][ T9859] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 771.863190][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 771.870844][ T9859] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 772.054454][T17512] usb 6-1: USB disconnect, device number 50 12:31:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x2, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8917, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() sendmsg$netlink(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x20}, 0x0) 12:31:37 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d00090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:37 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) [ 773.857804][T17507] usb 4-1: USB disconnect, device number 44 12:31:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x40000, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x51, 0x8e, 0x1}, 0x20) socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="1107000000000000000008000000080003", @ANYRES32, @ANYBLOB="93c2982742af4b2a4d2f250ccb82098cc8ce2c"], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x3}, 0x0, 0x0, &(0x7f0000000540)={0x1, 0x3, 0x3a3, 0x8}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=0x4}}, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='lock_acquire\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x8, &(0x7f0000000840)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x2d}, @func={0x85, 0x0, 0x1, 0x0, 0xffffeffc}, @ldst={0x2, 0x280c236d3fa74b53, 0x3, 0xb, 0x2, 0x8, 0x10}, @alu={0x7, 0x1, 0x9, 0x9, 0x0, 0x4, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x0, 0x5, 0x8, 0xfffffffffffffff4, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0x9, &(0x7f0000000400)=""/9, 0x41100, 0x11, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x7, 0xfffffffa}, 0x10, r5, r6}, 0x78) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00e42ef10000000400080d000000"], 0xfffffdef}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002a00000429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="09000a010000000000008000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4a020) 12:31:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8040, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000013000d0e000000000000000007000000fd1dfd53ce68ad48e1e4e24691afe984e282119a40fa75e16d0596d92c0e5c2757e1c45e627f5c25501c4271414f03b35faf3afc76450e8f935fd2538cc7d0aac62a5e78b3ac3ef1cebbe7855ee8b7f6100ba5b5358f04847a00ed622563478dc3157ffeffa558f14069139076ecc8"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x3f, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="76b2ce1484fba415326d43105c4584e5b3efcb4273a3b603e4edf36aa608e500090030e92e2618aee179c5617b7af50beee5ed08009b7e6a77bd7cc0aead9bb27d6d4ab503925869b0127a1ef2173a1df145bb9fddcdc019933ff9d6dfed13843679dde102de9b020000000000000017583fe7623c0cc5f76007fa83df77e9cc2806f5b24670f744edef4f1bcd87f61eb87a225cda0ded664323b7186d84534a0ae5cad732ff708f83254625c4acf9c0ba80ea7000476a69799f6c3e3c2a43dfac7b9107771e97da5234da98a842b95b08095ed4bd4940cf7c1f1471abb52ecaed4ff87d4d16a678cd141423bfd9f0d2f9fc11a479eedc6e4208f5e1f7fa61a208d10423e81cdd1e40896c449bd5a1ace4b2e4be8e25492907b6d38d054ee3f1673fd4658b0000000000000000247d04493ff4b85bb7b9e0dea3f2ca36e452eedbf39a49622900"/336, @ANYRESDEC=r2], 0x1000001bd) 12:31:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x4}, 0x40) 12:31:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @local}, @hci, 0xffff}) 12:31:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) [ 774.251260][T13805] usb 6-1: new high-speed USB device number 51 using dummy_hcd 12:31:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x0, @local}, @hci}) 12:31:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 12:31:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 12:31:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x800, 0x8}, 0x40) [ 774.431144][T17507] usb 4-1: new high-speed USB device number 45 using dummy_hcd 12:31:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8982, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @local}, @hci}) [ 774.501122][T13805] usb 6-1: Using ep0 maxpacket: 32 [ 774.622071][T13805] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 774.630465][T13805] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 774.667016][T13805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 774.694730][T13805] usb 6-1: config 1 has no interface number 0 [ 774.702382][T13805] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 774.712295][T13805] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 774.731225][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 774.743366][T13805] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 774.771414][T13805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.834474][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 774.871799][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.888701][T17507] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 774.991310][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 775.006513][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 775.028097][T17507] usb 4-1: Manufacturer: syz [ 775.047990][T17507] usb 4-1: config 0 descriptor?? [ 775.051636][T13805] snd_usb_pod 6-1:1.1: invalid control EP [ 775.058694][T13805] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 775.094108][T13805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 775.112797][T13805] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 775.266625][ T1735] usb 6-1: USB disconnect, device number 51 12:31:39 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d00090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 776.091080][ T9859] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 776.332043][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 776.461133][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 776.469981][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 776.480319][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 776.490112][ T9859] usb 6-1: config 1 has no interface number 0 [ 776.497069][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 776.507760][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 776.521708][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 776.532357][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.583261][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 776.801399][ T9859] snd_usb_pod 6-1:1.1: invalid control EP [ 776.807259][ T9859] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 776.826414][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 776.840942][ T9859] snd_usb_pod: probe of 6-1:1.1 failed with error -22 12:31:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4c705f0a813a"}, 0x14) 12:31:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340), 0x0}, 0x20) 12:31:40 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffb}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 777.010037][ T9859] usb 4-1: USB disconnect, device number 45 [ 777.048379][T17507] usb 6-1: USB disconnect, device number 52 12:31:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffb}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4c705f0a813a"}, 0x14) 12:31:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x40000, [{0x0, 0x2, 0x1000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="1107000000000000000008000000080003", @ANYRES32, @ANYBLOB="93c2982742af4b2a4d2f250ccb82098cc8ce2c"], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x3}, 0x0, 0x0, &(0x7f0000000540)={0x1, 0x3, 0x3a3, 0x8}, &(0x7f0000000580)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=0x4}}, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='lock_acquire\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x8, &(0x7f0000000840)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x2d}, @func={0x85, 0x0, 0x1, 0x0, 0xffffeffc}, @ldst={0x2, 0x280c236d3fa74b53, 0x3, 0xb, 0x2, 0x8, 0x10}, @alu={0x7, 0x1, 0x9, 0x9, 0x0, 0x4, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x0, 0x5, 0x8, 0xfffffffffffffff4, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0x9, &(0x7f0000000400)=""/9, 0x41100, 0x11, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x7, 0xfffffffa}, 0x10, r6, r7}, 0x78) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00e42ef10000000400080d000000"], 0xfffffdef}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=r4, @ANYRESDEC], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 12:31:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffb}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d00090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:31:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffb}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4c705f0a813a"}, 0x14) [ 777.603761][ T9859] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 777.881071][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 778.009737][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.020497][ T9859] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.037956][T22564] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 778.121098][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 778.130196][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 778.139584][ T9859] usb 4-1: Manufacturer: syz [ 778.150517][ T9859] usb 4-1: config 0 descriptor?? [ 778.282613][T22564] usb 6-1: Using ep0 maxpacket: 32 [ 778.411229][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 778.425199][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 778.435207][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 778.445458][T22564] usb 6-1: config 1 has no interface number 0 [ 778.453035][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.463990][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 778.478436][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 778.488224][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.533850][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 778.751560][T22564] snd_usb_pod 6-1:1.1: invalid control EP [ 778.757340][T22564] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 778.770860][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 778.778452][T22564] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 778.957582][T22564] usb 6-1: USB disconnect, device number 53 12:31:43 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000b900000018000000c60c0000000000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:43 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x21153, r0}, 0x78) 12:31:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4c705f0a813a"}, 0x14) 12:31:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d0009058217"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 780.183750][T22564] usb 4-1: USB disconnect, device number 46 12:31:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x2, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @local}, @hci={0x1f, 0xffffffffffffffff}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00', 0x6c9, 0x8001, 0x4}) 12:31:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) 12:31:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 12:31:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:31:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8912, &(0x7f0000000100)={'tunl0\x00', 0x0}) 12:31:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 780.543021][T17512] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 780.811087][T22564] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 780.859652][T17512] usb 6-1: Using ep0 maxpacket: 32 [ 780.991737][T17512] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 781.000123][T17512] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 781.010796][T17512] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 781.019947][T17512] usb 6-1: config 1 has no interface number 0 [ 781.028024][T17512] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.041425][T17512] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 781.056135][T17512] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 781.080873][T22564] usb 4-1: Using ep0 maxpacket: 16 [ 781.090052][T17512] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 781.100509][T17512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.163836][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 781.210983][T22564] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.227052][T22564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 781.237183][T22564] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 781.361312][T22564] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 781.370358][T22564] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 781.379880][T22564] usb 4-1: Manufacturer: syz [ 781.388006][T22564] usb 4-1: config 0 descriptor?? [ 781.411433][T17512] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 781.418033][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 781.450538][T17512] snd_usb_pod: probe of 6-1:1.1 failed with error -90 [ 781.622317][T17512] usb 6-1: USB disconnect, device number 54 12:31:46 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 12:31:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@authinfo={0x10}], 0x10}, 0x0) 12:31:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x1600bd74, 0x0, 0x0) 12:31:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 12:31:46 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d0009058217"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 783.349391][ T1735] usb 4-1: USB disconnect, device number 47 12:31:46 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xfffffffffffffed6, 0x1c}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xd, 0x1c}, 0x1c) 12:31:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000080), 0x4) 12:31:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @local}, @hci, 0xffff, 0x0, 0x0, 0x0, 0x101}) 12:31:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0xf, 0x2}, 0x10) 12:31:46 executing program 1: sendto(0xffffffffffffffff, &(0x7f0000000040)="ee2435a2326de7f28b2ac6ea5705d77843342ae4f7c8b86dff10dd682037357c593833b0aa01e2f242b3bcf6ea7f20cd5bc0110e5231791c4eb79a4372b48789a192c97ebaa0077eca79ceffe6fc216b837eac4f62940ced032fe8c663dea84b284c46dd415f45f8dd0110a4332e652babe5501c55504e7ef0ecc4c8588e7ba411", 0x81, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x24, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)=0x8c) 12:31:47 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x4, 0x0, 0x0) [ 783.690724][ T9859] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 783.850855][ T1735] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 783.930751][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 784.050823][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 784.062687][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 784.084103][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 784.094511][ T1735] usb 4-1: Using ep0 maxpacket: 16 [ 784.100125][ T9859] usb 6-1: config 1 has no interface number 0 [ 784.109280][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 784.131842][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 784.151291][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 784.174246][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 784.189780][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.210827][ T1735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.227026][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 784.247601][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 784.265918][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 784.350877][ T1735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 784.363421][ T1735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 784.373319][ T1735] usb 4-1: Manufacturer: syz [ 784.380053][ T1735] usb 4-1: config 0 descriptor?? [ 784.491047][ T9859] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 784.497689][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 784.506749][ T9859] snd_usb_pod: probe of 6-1:1.1 failed with error -90 [ 784.700718][T22566] usb 6-1: USB disconnect, device number 55 12:31:49 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:49 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 12:31:49 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r2) 12:31:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 12:31:49 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 12:31:49 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d0009058217"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 786.444311][ T1735] usb 4-1: USB disconnect, device number 48 12:31:49 executing program 1: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) 12:31:49 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x1000001) 12:31:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e089b5b081b4d", 0x7}], 0x1) 12:31:50 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc102) 12:31:50 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 12:31:50 executing program 1: r0 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 786.871174][ T9859] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 787.050460][ T1735] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 787.130573][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 787.261320][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 787.269717][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 787.280995][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 787.292677][ T9859] usb 6-1: config 1 has no interface number 0 [ 787.298901][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.320510][ T1735] usb 4-1: Using ep0 maxpacket: 16 [ 787.330318][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.354799][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 787.369674][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 787.389232][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.464260][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 787.490609][ T1735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.500962][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.512949][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 787.620682][ T1735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.629774][ T1735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.638509][ T1735] usb 4-1: Manufacturer: syz [ 787.645686][ T1735] usb 4-1: config 0 descriptor?? [ 787.681188][ T9859] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 787.687795][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 787.712237][ T9859] snd_usb_pod: probe of 6-1:1.1 failed with error -90 [ 787.890889][ T9859] usb 6-1: USB disconnect, device number 56 12:31:52 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:52 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc102) 12:31:52 executing program 4: io_setup(0x4, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) 12:31:52 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x220a00) 12:31:52 executing program 2: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x2085, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x37f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) socket$netlink(0x10, 0x3, 0x0) 12:31:52 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 789.588008][ T1735] usb 4-1: USB disconnect, device number 49 12:31:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 12:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x0) 12:31:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 12:31:53 executing program 2: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) 12:31:53 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc102) 12:31:53 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000002540), 0x111002, 0x0) [ 789.940385][ T9859] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 790.130412][ T1735] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 790.220497][ T9859] usb 6-1: Using ep0 maxpacket: 32 [ 790.351503][ T9859] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 790.365229][ T9859] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 790.385104][ T9859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 790.396445][ T9859] usb 6-1: config 1 has no interface number 0 [ 790.410511][ T1735] usb 4-1: Using ep0 maxpacket: 16 [ 790.416137][ T9859] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.427838][ T9859] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 790.446185][ T9859] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 790.468655][ T9859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.551565][ T1735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.564487][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 790.578837][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.600666][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 790.691379][ T1735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 790.700702][ T1735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 790.708905][ T1735] usb 4-1: Manufacturer: syz [ 790.718225][ T1735] usb 4-1: config 0 descriptor?? [ 790.784787][ T9859] snd_usb_pod 6-1:1.1: set_interface failed [ 790.796212][ T9859] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 790.818797][ T9859] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 790.835039][ T9859] usb 6-1: USB disconnect, device number 57 12:31:56 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x480, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xfb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}, {0x4}]}]}, 0xec8}, 0x1, 0x0, 0x0, 0x40}, 0x2004889c) 12:31:56 executing program 2: bpf$MAP_UPDATE_ELEM(0x16, 0x0, 0x0) 12:31:56 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc102) 12:31:56 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xe452, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:31:56 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 792.720299][ T9859] usb 4-1: USB disconnect, device number 50 12:31:56 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x31, 0x0, @tid=r1}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x10101100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x0, 0x2, @tid=r3}, &(0x7f00000000c0)) poll(0x0, 0x0, 0x204) r4 = memfd_create(&(0x7f00000007c0)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\xf6\xb2\xcc@\xe6A\xaa\xae\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\x1e\xe9\xd7\x8b\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6l\xde\xd0\xca*(\x00\x00\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) fcntl$setlease(r4, 0x400, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x11, 0x1, @thr={&(0x7f0000000340), &(0x7f00000003c0)}}, &(0x7f00000004c0)) fcntl$setown(r4, 0x8, 0x0) execveat(r4, &(0x7f0000000700)='\x00', 0x0, 0x0, 0x1000) 12:31:56 executing program 2: syz_io_uring_setup(0x6b18, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3ff9, &(0x7f0000000100)={0x0, 0x9b07, 0x0, 0x1, 0x258}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:31:56 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ff9, &(0x7f0000000100)={0x0, 0x9b07, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:31:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000140)=0xe1) 12:31:56 executing program 4: memfd_create(&(0x7f0000000680)='+#,^$\'.&}\x00', 0x3) 12:31:56 executing program 0: syz_io_uring_setup(0x2085, &(0x7f0000005a80)={0x0, 0x0, 0x2, 0x0, 0x37f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) [ 793.090333][T22564] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 793.330302][ T9859] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 793.340518][T22564] usb 6-1: Using ep0 maxpacket: 32 [ 793.460978][T22564] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 793.469405][T22564] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 793.492140][T22564] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 793.508349][T22564] usb 6-1: config 1 has no interface number 0 [ 793.516643][T22564] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.538053][T22564] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 793.561341][T22564] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 793.577823][T22564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.630814][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 793.643195][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 793.770485][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.787032][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.800762][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 793.860203][T22564] snd_usb_pod 6-1:1.1: set_interface failed [ 793.866185][T22564] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 793.898866][T22564] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 793.910265][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.916583][T22564] usb 6-1: USB disconnect, device number 58 [ 793.924110][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.935361][ T9859] usb 4-1: Manufacturer: syz [ 793.951571][ T9859] usb 4-1: config 0 descriptor?? 12:31:59 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:31:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x63) 12:31:59 executing program 2: io_setup(0x5, &(0x7f0000000580)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000006c0)={&(0x7f0000000640), 0x8}) 12:31:59 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x101040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"970d7bd134f9b0b2a4578a8a54e918a5", 0x0, 0x0, {0x0, 0x1ff}, {0x100000000}, 0x3, [0x0, 0x3e, 0x0, 0x0, 0xfffffffffffffffb, 0x1, 0x0, 0x1, 0x0, 0x6628, 0x60]}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f00000005c0)) socket$packet(0x11, 0x3, 0x300) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000680)=0x6a) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000080) 12:31:59 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)) 12:31:59 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041435320410e5150e8d5000000010902088b5c01000000090401001186ee0d000905821704"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 795.853280][T13805] usb 4-1: USB disconnect, device number 51 12:31:59 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) 12:31:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:31:59 executing program 1: io_setup(0x9, &(0x7f0000002540)=0x0) io_cancel(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) 12:31:59 executing program 0: io_setup(0x4, &(0x7f0000000280)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x8}]) 12:31:59 executing program 4: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)}]) [ 796.240274][T17512] usb 6-1: new high-speed USB device number 59 using dummy_hcd 12:31:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) [ 796.450184][T13805] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 796.510164][T17512] usb 6-1: Using ep0 maxpacket: 32 [ 796.630892][T17512] usb 6-1: config index 0 descriptor too short (expected 35592, got 27) [ 796.639280][T17512] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 796.659389][T17512] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 796.678122][T17512] usb 6-1: config 1 has no interface number 0 [ 796.685890][T17512] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.698750][T17512] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 796.714502][T17512] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 796.730107][T13805] usb 4-1: Using ep0 maxpacket: 16 [ 796.732663][T17512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.815762][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 796.870297][T13805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.881266][T13805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.895073][T13805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 797.000150][T13805] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 797.000188][T13805] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 797.000216][T13805] usb 4-1: Manufacturer: syz [ 797.035007][T13805] usb 4-1: config 0 descriptor?? [ 797.040195][T17512] snd_usb_pod 6-1:1.1: set_interface failed [ 797.046255][T17512] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 797.078294][T17512] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 797.099356][T17512] usb 6-1: USB disconnect, device number 59 12:32:02 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:32:02 executing program 0: io_setup(0x9, &(0x7f0000002540)=0x0) io_destroy(r0) 12:32:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:32:02 executing program 4: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)}]) 12:32:02 executing program 5: ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) [ 798.966616][T17512] usb 4-1: USB disconnect, device number 52 12:32:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:32:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={0x0}}, 0x0) 12:32:02 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 12:32:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:32:02 executing program 4: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)}]) 12:32:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4) [ 799.500424][T17512] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 799.749930][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 799.869987][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.881034][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.892538][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 799.980752][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 799.990165][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 799.998166][T17512] usb 4-1: Manufacturer: syz [ 800.011839][T17512] usb 4-1: config 0 descriptor?? 12:32:05 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="30010000d2505b"], 0x130}}, 0x0) 12:32:05 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x404000, 0x0) 12:32:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:32:05 executing program 4: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)}]) 12:32:05 executing program 2: socket(0x1d, 0x0, 0x0) io_setup(0x4, &(0x7f0000000280)) [ 802.093745][T13805] usb 4-1: USB disconnect, device number 53 12:32:05 executing program 5: syz_io_uring_setup(0x3ff9, &(0x7f0000000100)={0x0, 0x9b07}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:32:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0xc01047d0, &(0x7f0000000100)) [ 802.266524][T26588] can: request_module (can-proto-0) failed. 12:32:05 executing program 4: bpf$MAP_UPDATE_ELEM(0x14, 0x0, 0x0) 12:32:05 executing program 1: io_setup(0x4, &(0x7f0000000280)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 802.326535][T26588] can: request_module (can-proto-0) failed. 12:32:05 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) 12:32:05 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) [ 802.649899][T13805] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 802.672899][ T25] audit: type=1804 audit(1631277125.966:6): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/280/file0/bus" dev="ramfs" ino=79623 res=1 errno=0 [ 802.747243][ T25] audit: type=1804 audit(1631277125.996:7): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/280/file0/bus" dev="ramfs" ino=79623 res=1 errno=0 [ 802.813790][ T25] audit: type=1804 audit(1631277126.076:8): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/280/file0/file0/bus" dev="ramfs" ino=79632 res=1 errno=0 [ 802.840256][ T25] audit: type=1804 audit(1631277126.076:9): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/280/file0/file0/bus" dev="ramfs" ino=79632 res=1 errno=0 [ 802.889909][T13805] usb 4-1: Using ep0 maxpacket: 16 [ 803.013944][T13805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.028509][T13805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 803.059589][T13805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 803.149899][T13805] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 803.159869][T13805] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 803.167975][T13805] usb 4-1: Manufacturer: syz [ 803.175386][T13805] usb 4-1: config 0 descriptor?? 12:32:08 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0xc01047d0, &(0x7f0000000100)) 12:32:08 executing program 4: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000005c80)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:32:08 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x42c80, 0x0) 12:32:08 executing program 2: bpf$MAP_UPDATE_ELEM(0x1a, 0x0, 0x0) 12:32:08 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) [ 805.239057][T13805] usb 4-1: USB disconnect, device number 54 12:32:08 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) [ 805.385574][ T25] audit: type=1804 audit(1631277128.676:10): pid=26635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/281/file0/bus" dev="ramfs" ino=79658 res=1 errno=0 12:32:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) close(r1) 12:32:08 executing program 4: syz_io_uring_setup(0x2085, &(0x7f0000005a80)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) 12:32:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0xc01047d0, &(0x7f0000000100)) [ 805.534088][ T25] audit: type=1804 audit(1631277128.706:11): pid=26635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/281/file0/bus" dev="ramfs" ino=79658 res=1 errno=0 12:32:08 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) [ 805.637306][T26655] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 805.659500][ T25] audit: type=1804 audit(1631277128.946:12): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/658/file0/bus" dev="ramfs" ino=78618 res=1 errno=0 12:32:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0xc01047d0, &(0x7f0000000100)) [ 805.704138][T26655] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 805.782216][ T25] audit: type=1804 audit(1631277128.956:13): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/newroot/658/file0/bus" dev="ramfs" ino=78618 res=1 errno=0 [ 805.909792][T13805] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 805.927102][ T25] audit: type=1804 audit(1631277129.166:14): pid=26659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/282/file0/bus" dev="ramfs" ino=79687 res=1 errno=0 [ 805.928946][ T25] audit: type=1804 audit(1631277129.176:15): pid=26659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/282/file0/bus" dev="ramfs" ino=79687 res=1 errno=0 [ 806.189613][T13805] usb 4-1: Using ep0 maxpacket: 16 [ 806.330408][T13805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.351051][T13805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.407188][T13805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 806.530597][T13805] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.544866][T13805] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.563680][T13805] usb 4-1: Manufacturer: syz [ 806.578657][T13805] usb 4-1: config 0 descriptor?? [ 807.435980][T26657] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 808.301714][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.308214][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 12:32:11 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:11 executing program 0: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000680)=0x6a) fork() 12:32:11 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x0) 12:32:11 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) 12:32:11 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) 12:32:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) [ 808.384570][ T1735] usb 4-1: USB disconnect, device number 55 [ 808.538240][ T25] audit: type=1804 audit(1631277131.827:16): pid=26693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/659/file0/bus" dev="ramfs" ino=79717 res=1 errno=0 12:32:11 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_complete(0x0) 12:32:11 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x268281, 0x0) syz_io_uring_setup(0x2be4, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 12:32:11 executing program 0: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) [ 808.643721][ T25] audit: type=1804 audit(1631277131.857:17): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/283/file0/bus" dev="ramfs" ino=79718 res=1 errno=0 [ 808.732191][ T25] audit: type=1804 audit(1631277131.867:18): pid=26693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/newroot/659/file0/bus" dev="ramfs" ino=79717 res=1 errno=0 12:32:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x480, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xfb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}, {0x4}]}]}, 0xec8}, 0x1, 0x0, 0x0, 0x40}, 0x2004889c) 12:32:12 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) 12:32:12 executing program 4: r0 = memfd_create(&(0x7f0000000080)='*{[(.^\x00', 0x0) io_setup(0x9, &(0x7f0000002540)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfa3411eafcd21d12, 0x0, r0, 0x0}]) [ 808.842860][ T25] audit: type=1804 audit(1631277131.897:19): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/283/file0/bus" dev="ramfs" ino=79718 res=1 errno=0 [ 809.021300][ T1735] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 809.056889][ T25] audit: type=1804 audit(1631277132.347:20): pid=26712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/660/file0/bus" dev="ramfs" ino=79740 res=1 errno=0 [ 809.098818][ T25] audit: type=1804 audit(1631277132.387:21): pid=26712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/newroot/660/file0/bus" dev="ramfs" ino=79740 res=1 errno=0 [ 809.309605][ T1735] usb 4-1: Using ep0 maxpacket: 16 [ 809.448455][ T1735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.477419][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 809.493802][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 809.515249][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.610281][ T1735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 809.619753][ T1735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 809.627770][ T1735] usb 4-1: Manufacturer: syz [ 809.634871][ T1735] usb 4-1: config 0 descriptor?? 12:32:14 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:14 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) 12:32:14 executing program 1: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, 0x0) 12:32:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 12:32:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x1, &(0x7f0000002340)=[{0x2}]}) 12:32:14 executing program 2: io_setup(0x0, &(0x7f0000000280)) [ 811.552496][T13826] usb 4-1: USB disconnect, device number 56 12:32:15 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/212) 12:32:15 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={0x0}}, 0x0) 12:32:15 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f00000057c0), 0x20040, 0x0) 12:32:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)) 12:32:15 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) 12:32:15 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/212) [ 812.149588][T13826] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 812.407426][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 812.530131][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.543056][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.554908][T13826] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 812.566016][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.690257][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 812.703846][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.712355][T13826] usb 4-1: Manufacturer: syz [ 812.718782][T13826] usb 4-1: config 0 descriptor?? 12:32:18 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:18 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xe452, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 12:32:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 12:32:18 executing program 0: bpf$MAP_UPDATE_ELEM(0x19, 0x0, 0x0) 12:32:18 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/212) 12:32:18 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) [ 814.704933][T13826] usb 4-1: USB disconnect, device number 57 12:32:18 executing program 0: clock_gettime(0x3, &(0x7f0000001300)) 12:32:18 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/212) 12:32:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2271, &(0x7f0000000100)) 12:32:18 executing program 5: bpf$MAP_UPDATE_ELEM(0x1b, 0x0, 0x0) 12:32:18 executing program 0: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:32:18 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) [ 815.327361][T13826] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 815.599326][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 815.734566][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.749252][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 815.787110][T13826] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 815.798382][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.889395][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 815.898488][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 815.909335][T13826] usb 4-1: Manufacturer: syz [ 815.915740][T13826] usb 4-1: config 0 descriptor?? 12:32:21 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:21 executing program 4: mkdir(0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x40, 0x8000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r0, 0x6, 0x20, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 12:32:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x241, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='wlan1\x00', 0x5, 0x5f9a, 0x1}) socket$inet(0x2, 0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[{0x28, 0x105, 0x1, "3eb2f1691c7f2ffa82383e25cbe70aee920233af"}, {0x90, 0x0, 0x2, "5b7d4b532c244d45bd8ac49db292dc70f0d3571f2cb1b02a0603910710eb347d2ab6894d0187854cc577ce9e9e4a08b9b7d73202a20807526adbe8c1cdf9c987c3998bf4c3ce6e9f540f5fe7c1426051ba06f125f63b5837868e06b73ce6ee7a667aff7432d89ab44126a3a8301b73c822298ed902d3a1c3475ba413dfbeb0"}, {0xb8, 0x10c, 0xac0, "3cb64b1497bbd73630cbc159e943ab4934dc93e01f33963ea093599f2a97044c001703f342f8c2cb65592894695e03d52254854ed88de1dc8988dd1441610a84e00e0855bbfae33642d9f8fadce57c690d01b9cf5f4f70750282711ae05bbdd3d4510ff371c1db5cf669162a9699a2f31b3d2025e0151bd4f9a524ed7e5f83ea4a41179987fa691619a8e482740af584c286a70e4ca4b01bbe234eff7f117162692b4f26744cd8"}, {0x38, 0x10b, 0x5, "6102e210097bb299fe8014c4db1b18114760114a43c50071034d4d42768a776a734d"}, {0x38, 0x88, 0xfffff7b6, "e7e5a68278f38d035f7fd79df017c65581ab84f319d4daa36f8db037669ba296024956dc7a3126d2"}], 0x1e0}}], 0x1, 0x24040845) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast2, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000b00)=0xe8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x20a900}], 0xaa, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 12:32:21 executing program 2: io_setup(0x9, &(0x7f0000002540)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 12:32:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2271, &(0x7f0000000100)) 12:32:21 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000004900)) [ 817.879839][T13826] usb 4-1: USB disconnect, device number 58 12:32:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={0x0}}, 0x0) [ 818.048340][T26850] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:32:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/180) 12:32:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2271, &(0x7f0000000100)) 12:32:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000640), 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000a40)={r1}) 12:32:21 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 12:32:21 executing program 4: io_setup(0x5, &(0x7f0000000580)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 818.489376][T13826] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 818.739151][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 818.877924][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.905583][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 818.925038][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 818.935511][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 818.945668][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.059200][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 819.068368][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 819.077191][T13826] usb 4-1: Manufacturer: syz [ 819.084518][T13826] usb 4-1: config 0 descriptor?? 12:32:24 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:24 executing program 0: syz_io_uring_setup(0x6540, &(0x7f0000000000)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:32:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2271, &(0x7f0000000100)) 12:32:24 executing program 5: r0 = memfd_create(&(0x7f0000000080)='*{[(.^\x00', 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 12:32:24 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x458a82, 0x0) 12:32:24 executing program 4: bpf$MAP_UPDATE_ELEM(0xf, 0x0, 0x0) 12:32:24 executing program 4: syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x47c00) 12:32:24 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r0 = io_uring_setup(0x207513, &(0x7f0000000140)={0x0, 0xf70f, 0x10}) io_uring_setup(0x6ee5, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 821.158982][T13826] rc_core: IR keymap rc-hauppauge not found [ 821.184456][T13826] Registered IR keymap rc-empty 12:32:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40002040, &(0x7f0000004c80)={0x77359400}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 12:32:24 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) 12:32:24 executing program 2: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, r0+60000000}, 0x0) syz_io_uring_complete(0x0) [ 821.222490][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.329013][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:32:24 executing program 4: r0 = syz_io_uring_setup(0x398b, &(0x7f0000000300)={0x0, 0x869d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 821.379809][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 821.434586][ T25] audit: type=1804 audit(1631277144.727:22): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/290/file0/bus" dev="ramfs" ino=80953 res=1 errno=0 [ 821.487302][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 821.565446][ T25] audit: type=1804 audit(1631277144.777:23): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/290/file0/bus" dev="ramfs" ino=80953 res=1 errno=0 [ 821.597748][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.608909][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.623182][ T25] audit: type=1804 audit(1631277144.917:24): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/290/file0/file0/bus" dev="ramfs" ino=80961 res=1 errno=0 [ 821.628945][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.652318][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.668943][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.684565][ T25] audit: type=1804 audit(1631277144.917:25): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/290/file0/file0/bus" dev="ramfs" ino=80961 res=1 errno=0 [ 821.688928][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.712782][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.718749][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.728916][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.748910][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.754942][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.768929][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.789057][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.795266][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.808903][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.828913][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.848923][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.854933][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.869006][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.888898][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.899048][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.908925][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.928904][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.934886][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.948923][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.968917][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 821.974852][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.988912][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.008896][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.014820][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 822.028930][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.048901][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.054900][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 822.068906][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.088892][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.096868][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 822.105360][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 822.113829][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.128887][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.148886][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.168891][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.180840][T13826] usb 4-1: USB disconnect, device number 59 [ 822.188914][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 822.569015][T13826] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 822.828867][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 822.949199][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.959494][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.971338][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 822.981404][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 822.991409][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.089225][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 823.098487][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 823.106756][T13826] usb 4-1: Manufacturer: syz [ 823.118020][T13826] usb 4-1: config 0 descriptor?? 12:32:27 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:27 executing program 0: pipe2$9p(0x0, 0xc0000) 12:32:27 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x40882, 0x0) 12:32:27 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)={0x4c}, 0x4c}}, 0x0) 12:32:27 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) 12:32:27 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x5c238bd2e7176487, 0x0) [ 824.545034][ T25] audit: type=1804 audit(1631277147.837:26): pid=26958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/291/file0/bus" dev="ramfs" ino=80989 res=1 errno=0 12:32:27 executing program 0: syz_io_uring_setup(0x2085, &(0x7f0000005a80)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 12:32:27 executing program 4: r0 = io_uring_setup(0x207513, &(0x7f0000000140)={0x0, 0x0, 0x10}) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) io_uring_setup(0x6ee5, &(0x7f00000000c0)={0x0, 0xf24a, 0x20, 0x0, 0x0, 0x0, r0}) 12:32:27 executing program 1: socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) [ 824.588810][T13826] rc_core: IR keymap rc-hauppauge not found [ 824.595029][T13826] Registered IR keymap rc-empty 12:32:27 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0x0, 0xee01, 0xee00}}) [ 824.645890][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.677445][ T25] audit: type=1804 audit(1631277147.857:27): pid=26958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/291/file0/bus" dev="ramfs" ino=80989 res=1 errno=0 [ 824.738896][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.769845][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 824.826633][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 12:32:28 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) 12:32:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 824.915794][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.938780][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 824.958763][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 824.969075][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.988845][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.008889][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.038755][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.044853][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.068867][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.088807][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.108789][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.114902][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.138750][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.148822][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.168747][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.185954][ T25] audit: type=1804 audit(1631277148.477:28): pid=26984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/292/file0/bus" dev="ramfs" ino=80001 res=1 errno=0 [ 825.208631][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.214685][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.227339][ T25] audit: type=1804 audit(1631277148.517:29): pid=26984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/292/file0/bus" dev="ramfs" ino=80001 res=1 errno=0 [ 825.258753][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.266353][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.278762][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.308851][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.314776][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.328765][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.348753][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.354735][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.378747][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.398762][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.404702][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 825.428774][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.448749][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.455751][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 825.468732][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.479045][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 825.491125][T13826] usb 4-1: USB disconnect, device number 60 [ 825.498750][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 825.938906][T13826] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 826.198997][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 826.318844][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.329207][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.341336][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 826.351238][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 826.361200][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.448903][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 826.458117][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 826.467647][T13826] usb 4-1: Manufacturer: syz [ 826.480213][T13826] usb 4-1: config 0 descriptor?? 12:32:31 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:31 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 12:32:31 executing program 0: io_setup(0x9, &(0x7f0000002540)) io_setup(0x5, &(0x7f0000000580)) 12:32:31 executing program 4: io_uring_setup(0x207513, &(0x7f0000000140)) 12:32:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x46, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x40) 12:32:31 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r4, r4, &(0x7f0000000040), 0x7fff) [ 827.868848][T13826] rc_core: IR keymap rc-hauppauge not found [ 827.874942][T13826] Registered IR keymap rc-empty [ 827.893071][ T25] audit: type=1804 audit(1631277151.187:30): pid=27017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/293/file0/bus" dev="ramfs" ino=81031 res=1 errno=0 12:32:31 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x93, 0xc102) [ 827.905642][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:32:31 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580)={&(0x7f0000000500), 0x8}) 12:32:31 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000002080), 0x214043, 0x0) 12:32:31 executing program 0: io_setup(0x4, &(0x7f0000000280)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) [ 828.017539][ T25] audit: type=1804 audit(1631277151.227:31): pid=27017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/293/file0/bus" dev="ramfs" ino=81031 res=1 errno=0 [ 828.042065][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.099253][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 12:32:31 executing program 4: syz_io_uring_setup(0x6b18, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ff9, &(0x7f0000000100), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 828.156516][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 12:32:31 executing program 2: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) [ 828.251467][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.268617][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.288637][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.308621][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.315006][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.328612][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.348642][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.368620][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.374723][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.388633][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.408629][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.414764][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.428632][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.448613][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.454683][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.468755][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.488613][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.494755][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.508627][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.528621][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.534651][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.548642][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.568622][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.574723][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.588763][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.608607][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.614665][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.628621][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.648608][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.654682][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.668616][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.688599][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.695755][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 828.708600][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.714552][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 828.728599][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 828.742789][T13826] usb 4-1: USB disconnect, device number 61 [ 828.748805][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 829.138775][T13826] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 829.378608][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 829.498774][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.509003][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 829.520497][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 829.530728][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 829.540881][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.628726][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 829.637968][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 829.646474][T13826] usb 4-1: Manufacturer: syz [ 829.652781][T13826] usb 4-1: config 0 descriptor?? 12:32:34 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:34 executing program 1: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:32:34 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) 12:32:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) 12:32:34 executing program 4: io_setup(0x4, &(0x7f0000000280)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)}]) 12:32:34 executing program 2: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:34 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:34 executing program 5: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2276, &(0x7f0000000240)={0xea, ""/234}) [ 831.068679][T13826] rc_core: IR keymap rc-hauppauge not found [ 831.074789][T13826] Registered IR keymap rc-empty [ 831.101903][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 12:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0) [ 831.158739][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.199162][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 831.270371][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input44 [ 831.349917][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.368492][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.388489][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r1) [ 831.408492][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.428598][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.448516][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:34 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001040)) [ 831.468488][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.475266][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.488500][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.508508][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.528481][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.548529][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.568550][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.574831][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.588498][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.608489][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.614591][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.628484][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.648512][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.668495][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.675664][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.688467][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.708484][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.728499][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.734578][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.748485][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.768519][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.776380][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.788490][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.808498][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.818823][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.828462][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.848466][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.859055][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.868542][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.888482][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.908468][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.914562][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.928482][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.948481][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.955613][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 831.963753][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 831.972215][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.988475][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 831.995631][T13826] usb 4-1: USB disconnect, device number 62 [ 832.008463][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 832.398644][T13826] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 832.638483][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 832.758548][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.768787][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 832.782556][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 832.793069][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 832.804121][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.908624][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 832.917702][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 832.927147][T13826] usb 4-1: Manufacturer: syz [ 832.934385][T13826] usb 4-1: config 0 descriptor?? 12:32:37 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:37 executing program 2: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227e, &(0x7f0000000100)) 12:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xfb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x2004889c) 12:32:37 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:37 executing program 5: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:37 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000052c0), r0) 12:32:37 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x700) [ 834.418569][T13826] rc_core: IR keymap rc-hauppauge not found [ 834.424671][T13826] Registered IR keymap rc-empty [ 834.445672][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.510228][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.559026][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 834.639796][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 12:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={0x0}}, 0x0) 12:32:38 executing program 4: bpf$MAP_UPDATE_ELEM(0x22, 0x0, 0x0) [ 834.733242][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.748350][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.768380][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.788420][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.808383][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.814459][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.828345][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:38 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) [ 834.848445][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.868366][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.875705][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.888354][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:38 executing program 5: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) [ 834.908344][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.914397][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.928338][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.948368][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.958647][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.968376][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 834.988378][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.000089][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.008370][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.028335][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.048375][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.060217][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.068388][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.088387][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.108342][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.114365][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.128359][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.148404][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.168357][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.188391][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.194518][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.208355][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.228346][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.234352][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.248368][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.268349][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.275236][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 835.284022][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 835.292515][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.308322][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.328380][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.342792][T13826] usb 4-1: USB disconnect, device number 63 [ 835.348843][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 835.738460][T13826] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 835.988401][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 836.109277][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.121346][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.133004][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 836.144969][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 836.155154][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.259327][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 836.268537][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 836.276626][T13826] usb 4-1: Manufacturer: syz [ 836.283836][T13826] usb 4-1: config 0 descriptor?? 12:32:40 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x46}, 0x40) 12:32:40 executing program 2: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r0, 0x9d, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 12:32:40 executing program 4: syz_io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xe7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:32:40 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 12:32:40 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000002540), 0x111002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:32:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, 0x0, 0x0) 12:32:41 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 12:32:41 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9d, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12:32:41 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000002540), 0x400, 0x0) [ 837.748350][T13826] rc_core: IR keymap rc-hauppauge not found [ 837.748372][T13826] Registered IR keymap rc-empty [ 837.748449][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 837.848461][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 837.899482][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 837.963974][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 12:32:41 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:41 executing program 5: syz_open_dev$sg(&(0x7f0000000240), 0x61f, 0x80240) [ 838.094054][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.118224][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.148191][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.154529][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.168198][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.188331][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.208237][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.214398][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.238182][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.258209][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.264233][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.288199][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.306939][T27280] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 838.318183][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.324340][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.348193][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.368338][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.388572][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.394802][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.418200][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.438181][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.444173][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.468312][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.478764][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.498169][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.528178][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.548304][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.578174][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.598304][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.604250][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.612414][T27280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.619217][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.638266][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.652204][T27282] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 838.662557][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.671905][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.679115][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.696430][T27282] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 838.703870][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.716510][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 838.724609][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.748173][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.761087][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 838.769599][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.788333][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.808199][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 838.816071][T13826] usb 4-1: USB disconnect, device number 64 [ 838.828160][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 839.258229][T13826] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 839.518492][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 839.638514][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.658963][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.678173][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.687855][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 839.706627][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.729455][T27280] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 839.808599][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 839.818369][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.826393][T13826] usb 4-1: Manufacturer: syz [ 839.838673][T13826] usb 4-1: config 0 descriptor?? 12:32:44 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:44 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 12:32:44 executing program 5: syz_io_uring_complete(0x0) syz_io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xe7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:32:44 executing program 2: openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 12:32:44 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9d, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12:32:44 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:44 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:44 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) [ 841.318222][T13826] rc_core: IR keymap rc-hauppauge not found [ 841.324278][T13826] Registered IR keymap rc-empty [ 841.332802][T27371] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 841.355829][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.429025][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.474675][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 841.493668][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 841.517540][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.538045][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.558082][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.564125][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.588150][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.588509][T27371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 841.608074][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.614385][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.638043][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.649021][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.658578][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.678092][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:45 executing program 5: r0 = memfd_create(&(0x7f0000000080)='*{[(.^\x00', 0x0) io_setup(0x9, &(0x7f0000002540)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x10001}]) [ 841.698075][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.707274][T27372] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 841.728042][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.734157][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.758034][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.774954][T27372] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 841.778116][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.791681][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.818043][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.829179][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.848058][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.868122][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.888075][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.894239][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.918046][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.938073][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.944195][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.968025][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 841.988089][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.008102][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.014060][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 842.038026][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.058081][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.065051][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 842.075126][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 842.083741][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.108043][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.138021][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.158122][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 842.178070][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:45 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 842.188658][T13826] usb 4-1: USB disconnect, device number 65 [ 842.198096][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:45 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9d, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 842.688585][T13826] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 842.978104][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 843.109194][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.131944][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.148935][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 843.166272][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 843.183673][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.308940][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 843.322801][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 843.358785][T13826] usb 4-1: Manufacturer: syz [ 843.375613][T13826] usb 4-1: config 0 descriptor?? [ 843.406351][T27421] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 843.441514][T27422] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:32:47 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:47 executing program 1: ptrace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9d, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="2e640f011c0d6b970b5c66ba4100ec660f380613c0c4f20f01cb670fc77600670fc739b8010000000f01d967550fd82500600000", 0x34}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12:32:47 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 12:32:47 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:47 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:47 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 844.802376][T13826] rc_core: IR keymap rc-hauppauge not found [ 844.808681][T13826] Registered IR keymap rc-empty [ 844.864128][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 844.897294][T27491] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 844.948353][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.045493][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 845.069691][T27491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 845.082653][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 845.112140][T27494] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 845.187118][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.197907][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.217898][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.225522][T27494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.237918][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.248236][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.256646][T27496] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 845.257932][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.277891][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.283872][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.297921][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.317913][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.323990][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.338050][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.357898][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.364154][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.377905][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.397914][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.404551][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.417972][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.437975][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.457895][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.477909][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.497962][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.517899][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.528828][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.537905][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.557884][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.578296][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.595321][T27496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.602144][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.617883][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.637900][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.657971][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.664273][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.678009][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.697909][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.717910][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.737950][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.740561][T27499] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 845.745386][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.761967][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.777868][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:49 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 845.797897][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.817906][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.837895][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.855137][T27499] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 845.862566][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.877864][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.897948][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:49 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 845.917922][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.923926][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 845.937892][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.957887][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.971851][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 845.980153][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 845.995147][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 846.003674][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 846.017860][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 846.037864][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 846.057862][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 846.077585][T13826] usb 4-1: USB disconnect, device number 66 [ 846.083672][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 846.508100][T13826] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 846.656273][T27501] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 846.670108][T27501] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 846.748016][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 846.878936][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.927883][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 12:32:50 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 846.987873][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 847.000986][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 847.037984][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:32:50 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 847.158003][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 847.174747][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 847.197708][T13826] usb 4-1: Manufacturer: syz [ 847.232160][T13826] usb 4-1: config 0 descriptor?? [ 847.447687][T27515] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 847.460345][T27515] bond1: (slave ip6tnl1): Error -95 calling set_mac_address 12:32:51 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:51 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 848.356426][T27656] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 848.475917][T27656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 848.547503][T27658] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 848.604173][T27658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 848.624826][T27666] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address 12:32:51 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:51 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "4f2ec3923b07e4be01b9ec377dffc50b"}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="ba5fd88805bdeecc57cecc1f128b61edd69e82708c3310c6101c319aa0e309a2aba9bcab07", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r6, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r3, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:32:52 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 12:32:52 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 848.693595][T27666] bond4: (slave ip6tnl1): Error -95 calling set_mac_address [ 848.797954][T13826] rc_core: IR keymap rc-hauppauge not found [ 848.804171][T13826] Registered IR keymap rc-empty [ 848.846369][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 848.938008][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 848.989078][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 849.053147][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 849.145046][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.157722][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.177737][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.197743][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.217722][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.228137][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.237720][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.259036][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.277752][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.283963][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.297734][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.317744][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.323921][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.337729][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.357715][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.365736][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.377725][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.397709][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.407803][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.417738][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.437846][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.457727][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.477721][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.483919][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.497751][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.517764][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.537703][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.544468][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.557735][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.577729][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.583724][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.597725][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.617709][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.623982][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 849.637719][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.657701][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.665046][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 849.677711][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:53 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 849.697709][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.717762][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.730340][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 849.739050][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:53 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 849.757699][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.777698][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 849.797118][T13826] usb 4-1: USB disconnect, device number 67 [ 849.803375][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 850.150184][T27688] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 850.165381][T27688] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 850.267805][T13826] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 850.517714][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 850.613277][T27743] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 850.638656][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.663384][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 12:32:54 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 850.712014][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 12:32:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 12:32:54 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 12:32:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2275, &(0x7f0000000100)) 12:32:54 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 850.797988][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 850.822421][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.918612][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 850.959672][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 851.001692][T13826] usb 4-1: Manufacturer: syz [ 851.048749][T13826] usb 4-1: config 0 descriptor?? 12:32:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2275, &(0x7f0000000100)) [ 851.389309][T13826] rc_core: IR keymap rc-hauppauge not found [ 851.395254][T13826] Registered IR keymap rc-empty [ 851.421981][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.487956][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.518231][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 851.549961][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 851.609383][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.627626][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.637753][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.647640][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.667630][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.673679][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.687650][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.707636][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.713583][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.727652][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.747635][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.753634][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.767640][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.787645][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.794930][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.807769][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.827634][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.835853][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.847645][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.867751][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.877960][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.887608][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.907609][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.927645][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.939510][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 851.947602][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.967611][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 851.987691][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.007638][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.015351][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.027653][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.047636][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.067650][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.087640][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.094811][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 852.107659][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.116942][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 852.127610][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:55 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000005640)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005600)={&(0x7f0000005580)={0x14}, 0x14}}, 0x0) 12:32:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2275, &(0x7f0000000100)) 12:32:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 12:32:55 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 12:32:55 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) [ 852.147603][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 852.155098][T13826] usb 4-1: USB disconnect, device number 68 [ 852.167632][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2275, &(0x7f0000000100)) 12:32:55 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) 12:32:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 12:32:55 executing program 5: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[0x0]) 12:32:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioprio_get$pid(0x2, 0x0) 12:32:55 executing program 2: memfd_create(&(0x7f0000000100)='/dev/nvram\x00', 0x4) [ 852.717782][T13826] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 852.957585][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 853.078532][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.102474][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.148884][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.196713][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 853.217647][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.312629][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.343161][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.357389][T13826] usb 4-1: Manufacturer: syz [ 853.364358][T13826] usb 4-1: config 0 descriptor?? [ 853.677701][T13826] rc_core: IR keymap rc-hauppauge not found [ 853.683753][T13826] Registered IR keymap rc-empty [ 853.689815][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.717655][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.748236][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 853.763200][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 853.794184][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.828003][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.847553][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.857671][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.867620][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.887548][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.893481][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.907548][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.927590][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.933567][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.947576][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.967539][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 853.973599][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.987523][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.007541][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.017678][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 854.027570][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.047532][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.053441][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 854.067540][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.087545][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.093515][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 854.107533][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.127558][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.133540][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 854.147527][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.167528][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.174462][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 854.182599][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 854.191152][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 854.200416][T13826] usb 4-1: USB disconnect, device number 69 [ 854.207544][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:57 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x54, &(0x7f00000000c0)={[{0x4d, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d380"}]}) 12:32:57 executing program 0: io_cancel(0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 12:32:57 executing program 5: bpf$MAP_UPDATE_ELEM(0x11, 0x0, 0x0) 12:32:57 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x0, 0x0}) io_setup(0x9, &(0x7f0000002540)=0x0) io_cancel(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 12:32:57 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002780)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "7a634b76f87b324fe807748cec1644298221fb4a9d7581964933046bd8e3343a35fd149b5c3fcc59834fd3d2130b41946c10bacc54145aebd302cc31ed59135f0c"}, @INET_DIAG_REQ_BYTECODE={0xe65, 0x1, "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"}]}, 0xec4}}, 0x0) 12:32:57 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0xee3a, 0x40a28, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x5010, 0x1ff, 0x28, 0xd, 0x4, 0x2, 0xe3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000049c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 12:32:57 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 12:32:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000780)=@framed, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:32:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:32:57 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x9, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8, 0x38}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 12:32:57 executing program 1: getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000005c80)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x2c}}, 0x0) 12:32:58 executing program 5: syz_io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 854.747549][T13826] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 854.987732][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 855.108428][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.118675][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.134190][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 855.144936][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 855.176757][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.268269][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 855.287562][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 855.295695][T13826] usb 4-1: Manufacturer: syz [ 855.304843][T13826] usb 4-1: config 0 descriptor?? [ 855.597558][T13826] rc_core: IR keymap rc-hauppauge not found [ 855.603495][T13826] Registered IR keymap rc-empty [ 855.610238][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.653012][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.698548][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 855.712823][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 855.756977][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.777477][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.807443][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.813570][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.827464][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.847525][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.853496][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.867459][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.897543][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.903523][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.917460][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.937468][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.943455][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.967486][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 855.997463][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.003866][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.027478][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.047467][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.053359][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.077465][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.097466][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.103415][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.127488][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.138003][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.147467][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.177460][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.183399][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.207454][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.227539][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.234583][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 856.253665][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 856.262251][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:32:59 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 12:32:59 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x0) 12:32:59 executing program 2: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 12:32:59 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x88dc3, 0x0) 12:32:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x6c, 0x0, 0x0, "011b67ac4eec3a75582d584ccd0f5f31ee38a1aa946dccba746f82b324a10bd05944306d21d9e63c8e48f00a6403389b618c319f4620341636c1386b10f9081b7576894ad4acbe14d2aa29931346bd3b7ddd910a3598f4f9a99b516232ad0b32fb9517f10e86ca238ee80c86"}) 12:32:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) [ 856.277423][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.285940][T13826] usb 4-1: USB disconnect, device number 70 [ 856.297413][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.435207][T27962] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:32:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xfb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x2004889c) 12:32:59 executing program 2: syz_io_uring_setup(0x44db, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:32:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 12:32:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 12:32:59 executing program 5: io_setup(0x9, &(0x7f0000002540)=0x0) io_cancel(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 12:32:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x480, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xfb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}, {0x4}]}]}, 0xec8}, 0x1, 0x0, 0x0, 0x40}, 0x2004889c) [ 856.957596][T13826] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 857.237595][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 857.388191][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.398389][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.410592][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 857.421452][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 857.432707][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.518303][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 857.527959][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 857.535967][T13826] usb 4-1: Manufacturer: syz [ 857.544376][T13826] usb 4-1: config 0 descriptor?? [ 857.877423][T13826] rc_core: IR keymap rc-hauppauge not found [ 857.883484][T13826] Registered IR keymap rc-empty [ 857.888941][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 857.920244][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 857.967866][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 857.982575][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 858.020012][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.047857][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.077534][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.107465][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.141816][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.177578][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.217511][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.247443][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.267448][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.287412][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.293332][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.317442][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.337409][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.344613][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.367391][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.397490][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.404272][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 858.412852][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 858.421405][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 858.430013][T13826] usb 4-1: USB disconnect, device number 71 12:33:02 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 12:33:02 executing program 2: bpf$MAP_UPDATE_ELEM(0x10, 0x0, 0x0) 12:33:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x10002) 12:33:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 12:33:02 executing program 5: syz_io_uring_setup(0x3f0e, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 12:33:02 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x218180, 0x0) 12:33:02 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) 12:33:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x100000000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 12:33:02 executing program 1: sched_rr_get_interval(0x0, &(0x7f00000001c0)) 12:33:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) [ 859.051828][T28030] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:33:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 12:33:02 executing program 5: socket(0x2d, 0x0, 0x0) [ 859.247333][T13826] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 859.498587][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 859.618305][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.638184][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.665128][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 859.676785][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 859.688698][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.778891][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 859.787992][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 859.796110][T13826] usb 4-1: Manufacturer: syz [ 859.810142][T13826] usb 4-1: config 0 descriptor?? [ 860.107473][T13826] rc_core: IR keymap rc-hauppauge not found [ 860.113536][T13826] Registered IR keymap rc-empty [ 860.121583][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.157489][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.188716][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 860.203065][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 860.238509][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.267779][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.297451][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.327478][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.358155][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.387383][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.417442][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.447389][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.477324][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.483326][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.497294][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.517313][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.523353][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.537416][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.557277][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.564288][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 860.572452][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 860.580919][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.589364][T13826] usb 4-1: USB disconnect, device number 72 12:33:04 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 12:33:04 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) 12:33:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 12:33:04 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) syz_io_uring_setup(0x58e7, &(0x7f0000000100), &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0, 0x0) 12:33:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x189, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x46, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 12:33:04 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) 12:33:04 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200) 12:33:04 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='/dev/nvram\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 12:33:04 executing program 0: socket(0x11, 0x3, 0x8761) 12:33:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 12:33:04 executing program 4: syz_io_uring_setup(0x3ff9, &(0x7f0000000100)={0x0, 0x9b07, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:33:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0) [ 861.447857][T13826] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 861.737462][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 861.877322][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.891855][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.904083][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.915393][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 861.925846][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.017438][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 862.026653][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 862.035706][T13826] usb 4-1: Manufacturer: syz [ 862.047865][T13826] usb 4-1: config 0 descriptor?? [ 862.367349][T13826] rc_core: IR keymap rc-hauppauge not found [ 862.373400][T13826] Registered IR keymap rc-empty [ 862.379816][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.408884][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.441900][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 862.465331][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input55 [ 862.484037][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.529196][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.557325][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.597300][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.627929][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.667962][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.697371][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.737256][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.743350][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.757177][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.777295][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.783312][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.807174][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.827259][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.833163][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.847178][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.877232][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.884067][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 862.895194][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 862.903695][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.917141][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.938351][T13826] usb 4-1: USB disconnect, device number 73 12:33:06 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000000c0)) 12:33:06 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) 12:33:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5}]}) 12:33:06 executing program 4: openat$nvram(0xffffffffffffff9c, 0x0, 0x559080, 0x0) 12:33:06 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='/dev/nvram\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 12:33:06 executing program 0: shmget$private(0x0, 0x1000, 0x3f00, &(0x7f0000fff000/0x1000)=nil) 12:33:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 12:33:06 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) 12:33:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8081) 12:33:06 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='/dev/nvram\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 12:33:06 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) fanotify_init(0x40, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000040), 0x7fff) 12:33:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x8}]}) [ 863.667254][T17512] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 863.927333][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 864.050620][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.073784][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.107148][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 864.118300][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 864.129448][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.217856][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 864.226911][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 864.236451][T17512] usb 4-1: Manufacturer: syz [ 864.248767][T17512] usb 4-1: config 0 descriptor?? [ 864.557140][T17512] rc_core: IR keymap rc-hauppauge not found [ 864.563152][T17512] Registered IR keymap rc-empty [ 864.573436][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.610087][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.647897][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 864.666980][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 864.712287][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.747328][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.777280][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.808215][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.837318][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.867196][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.897891][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.927135][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 864.933181][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.947060][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 864.967123][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 864.987100][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 864.993057][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 865.007086][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 865.027127][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 865.033100][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 865.047059][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 865.067133][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 865.074051][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 865.085315][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 865.093904][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 865.106786][T17512] usb 4-1: USB disconnect, device number 74 [ 865.113003][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:33:08 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000000c0)) 12:33:08 executing program 1: epoll_create(0x401) 12:33:08 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x8000) 12:33:08 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='/dev/nvram\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 12:33:08 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xe452, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:33:08 executing program 2: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) 12:33:08 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0xfffffffffffffeff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 12:33:08 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3702}}], 0x18}}], 0x2, 0x0) 12:33:08 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002780)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "7a634b76f87b324fe807748cec1644298221fb4a9d7581964933046bd8e3343a35fd149b5c3fcc59834fd3d2130b41946c10bacc54145aebd302cc31ed59135f0c"}, @INET_DIAG_REQ_BYTECODE={0xe61, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}}, 0x0) 12:33:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 12:33:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0xe8}]}) 12:33:09 executing program 4: io_setup(0x9, &(0x7f0000002540)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x1f}]) [ 865.857345][T22566] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 866.127058][T22566] usb 4-1: Using ep0 maxpacket: 16 [ 866.267875][T22566] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.283941][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 866.297413][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.308712][T22566] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 866.319805][T22566] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.427440][T22566] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.437391][T22566] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.445490][T22566] usb 4-1: Manufacturer: syz [ 866.454291][T22566] usb 4-1: config 0 descriptor?? [ 866.767227][T22566] rc_core: IR keymap rc-hauppauge not found [ 866.773149][T22566] Registered IR keymap rc-empty [ 866.779857][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.817736][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.848055][T22566] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 866.875441][T22566] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 866.900876][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.947237][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.977118][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.009416][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.047194][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.087149][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.129397][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.146992][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.157158][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.167023][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.187059][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.193115][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.206987][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.237055][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.243037][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 867.257002][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.277050][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.284293][T22566] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 867.292463][T22566] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 867.300894][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 867.310572][T22566] usb 4-1: USB disconnect, device number 75 12:33:10 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000000c0)) 12:33:10 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_setup(0xffff, &(0x7f0000000000)) 12:33:10 executing program 0: clock_gettime(0x0, &(0x7f0000000480)) 12:33:10 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 12:33:10 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x103041, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0) 12:33:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 12:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227c, 0x0) 12:33:11 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x103041, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0) 12:33:11 executing program 4: io_setup(0x5, &(0x7f0000000580)=0x0) io_pgetevents(r0, 0x7, 0x0, 0x0, 0x0, 0x0) 12:33:11 executing program 1: clock_gettime(0x0, &(0x7f0000001300)) 12:33:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, 0x0) 12:33:11 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x103041, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0) [ 868.167050][T17507] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 868.427186][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 868.557149][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.567490][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.580136][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 868.591701][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 868.602210][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.697537][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 868.706592][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 868.720277][T17507] usb 4-1: Manufacturer: syz [ 868.731993][T17507] usb 4-1: config 0 descriptor?? [ 869.056969][T17507] rc_core: IR keymap rc-hauppauge not found [ 869.063006][T17507] Registered IR keymap rc-empty [ 869.069811][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.108450][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.140625][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 869.164283][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 869.194537][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.227101][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.257326][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.287316][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.319114][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.346938][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.376982][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.407152][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.426896][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.446961][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.452931][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.466913][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.486966][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.493031][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.516906][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.537022][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.544039][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 869.552556][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 869.561031][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.576876][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 869.584148][T17507] usb 4-1: USB disconnect, device number 76 [ 869.748069][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.754400][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 12:33:13 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sync_file_range(r1, 0x0, 0x0, 0x0) 12:33:13 executing program 0: bpf$MAP_UPDATE_ELEM(0x6, 0x0, 0x0) 12:33:13 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) 12:33:13 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x103041, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0) 12:33:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227b, &(0x7f0000000100)) 12:33:13 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)={[{}]}) 12:33:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 12:33:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xfb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 12:33:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x8000000) 12:33:13 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x2e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) 12:33:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227b, &(0x7f0000000100)) 12:33:13 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 12:33:13 executing program 1: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, r0+60000000}, 0x0) 12:33:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 12:33:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227b, &(0x7f0000000100)) 12:33:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="9bef141816e7", &(0x7f0000000100)=""/143, 0x0, 0x0, 0x0, 0x0}) [ 870.386840][T22566] usb 4-1: new high-speed USB device number 77 using dummy_hcd 12:33:13 executing program 0: io_setup(0xffff, &(0x7f0000000000)) [ 870.627076][T22566] usb 4-1: Using ep0 maxpacket: 16 [ 870.757076][T22566] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.770011][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 870.783575][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 870.795854][T22566] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 870.814803][T22566] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.917735][T22566] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 870.931907][T22566] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 870.962985][T22566] usb 4-1: Manufacturer: syz [ 870.982856][T22566] usb 4-1: config 0 descriptor?? [ 871.306933][T22566] rc_core: IR keymap rc-hauppauge not found [ 871.312873][T22566] Registered IR keymap rc-empty [ 871.319241][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.346940][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.377549][T22566] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 871.408200][T22566] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59 [ 871.423518][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.464936][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.497117][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.527005][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.558546][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.586878][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.616973][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.646879][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.676787][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.682873][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.696785][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.716834][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.722751][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.736844][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.756804][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.764823][T22566] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 871.776765][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.786910][T22566] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 871.796789][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 871.803523][T22566] usb 4-1: USB disconnect, device number 77 12:33:15 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0xee01}}) 12:33:15 executing program 2: io_setup(0x9, &(0x7f0000002540)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="754c8169e8e0", 0x6}]) 12:33:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x227b, &(0x7f0000000100)) 12:33:15 executing program 0: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) 12:33:15 executing program 1: bpf$MAP_UPDATE_ELEM(0x18, 0x0, 0x0) 12:33:15 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)={[{}]}) 12:33:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000640), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000a40)) 12:33:15 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) preadv(r0, &(0x7f00000017c0), 0x286, 0x0, 0x0) 12:33:15 executing program 5: io_setup(0x9, &(0x7f0000002540)) io_setup(0x0, &(0x7f0000002540)) 12:33:15 executing program 1: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f00000001c0)) 12:33:15 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:33:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x5385, &(0x7f0000000040)=0x80000000) 12:33:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 12:33:15 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 12:33:15 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) [ 872.616997][T22566] usb 4-1: new high-speed USB device number 78 using dummy_hcd 12:33:15 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) 12:33:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x5382, 0x0) [ 872.856973][T22566] usb 4-1: Using ep0 maxpacket: 16 [ 872.981647][T22566] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.012050][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.054028][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.077034][T22566] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 873.096797][T22566] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.196929][T22566] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.206190][T22566] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.214976][T22566] usb 4-1: Manufacturer: syz [ 873.222846][T22566] usb 4-1: config 0 descriptor?? [ 873.526841][T22566] rc_core: IR keymap rc-hauppauge not found [ 873.532967][T22566] Registered IR keymap rc-empty [ 873.556269][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.587302][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.617159][T22566] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 873.631180][T22566] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 873.656342][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.706857][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.736799][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.767116][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.797083][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.826912][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.856862][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.886849][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.906728][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 873.916874][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.926791][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 873.946698][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 873.952614][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 873.966703][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 873.986771][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 873.993631][T22566] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 874.002187][T22566] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 874.010638][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.026704][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.035841][T22566] usb 4-1: USB disconnect, device number 78 12:33:17 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)={[{}]}) 12:33:17 executing program 0: io_setup(0x9, &(0x7f0000002540)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 12:33:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 12:33:17 executing program 2: openat$cgroup(0xffffffffffffffff, &(0x7f0000005780)='syz0\x00', 0x200002, 0x0) 12:33:17 executing program 5: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000680)) fork() 12:33:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) 12:33:17 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) 12:33:17 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000026c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002780)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "7a634b76f87b324fe807748cec1644298221fb4a9d7581964933046bd8e3343a35fd149b5c3fcc59834fd3d2130b41946c10bacc54145aebd302cc31ed59135f0c"}, @INET_DIAG_REQ_BYTECODE={0xe65, 0x1, "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"}]}, 0xec4}}, 0x0) 12:33:17 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x268281, 0x0) 12:33:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 12:33:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004c80)={0x77359400}) 12:33:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2289, 0x0) [ 874.857458][T13826] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 875.096770][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 875.237450][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.249413][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 875.262676][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 875.273913][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 875.285946][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 875.391487][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 875.405019][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 875.415067][T13826] usb 4-1: Manufacturer: syz [ 875.468110][T13826] usb 4-1: config 0 descriptor?? [ 875.796671][T13826] rc_core: IR keymap rc-hauppauge not found [ 875.802611][T13826] Registered IR keymap rc-empty [ 875.809159][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 875.846778][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 875.877165][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 875.898135][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 875.920676][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 875.966916][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 875.996790][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.026791][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.066710][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.106726][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.146807][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.152756][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.166675][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.186619][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.192516][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.216657][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.236622][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.243090][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.266612][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.286774][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.292721][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.316616][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.327771][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 876.335974][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 876.344458][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.366576][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 876.373733][T13826] usb 4-1: USB disconnect, device number 79 12:33:19 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2c, &(0x7f00000000c0)={[{0x27, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742"}]}) 12:33:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) 12:33:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = fanotify_init(0x40, 0x2) fanotify_mark(r3, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r5, r5, &(0x7f0000000040), 0x7fff) 12:33:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0'], 0x130}}, 0x0) 12:33:19 executing program 5: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) 12:33:19 executing program 2: io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 876.765802][ T25] audit: type=1804 audit(1631277200.049:32): pid=28528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/722/file0/bus" dev="ramfs" ino=82556 res=1 errno=0 12:33:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, 0x0, 0x0) [ 876.842410][ T25] audit: type=1804 audit(1631277200.089:33): pid=28528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/722/file0/bus" dev="ramfs" ino=82556 res=1 errno=0 12:33:20 executing program 4: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x37f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) 12:33:20 executing program 5: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) [ 876.971472][ T25] audit: type=1804 audit(1631277200.189:34): pid=28528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/722/file0/file0/bus" dev="ramfs" ino=82559 res=1 errno=0 12:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = fanotify_init(0x40, 0x2) fanotify_mark(r3, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r5, r5, &(0x7f0000000040), 0x7fff) 12:33:20 executing program 2: syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 12:33:20 executing program 1: syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x80240) [ 877.096946][ T25] audit: type=1804 audit(1631277200.210:35): pid=28533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/722/file0/file0/bus" dev="ramfs" ino=82559 res=1 errno=0 [ 877.207037][T22566] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 877.297164][ T25] audit: type=1804 audit(1631277200.590:36): pid=28550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/723/file0/bus" dev="ramfs" ino=82590 res=1 errno=0 [ 877.372580][ T25] audit: type=1804 audit(1631277200.620:37): pid=28550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/723/file0/bus" dev="ramfs" ino=82590 res=1 errno=0 [ 877.456754][T22566] usb 4-1: Using ep0 maxpacket: 16 [ 877.581495][T22566] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.598914][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 877.631811][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 877.652782][T22566] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 877.672364][T22566] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.787206][T22566] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 877.796512][T22566] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 877.805418][T22566] usb 4-1: Manufacturer: syz [ 877.813013][T22566] usb 4-1: config 0 descriptor?? [ 878.126725][T22566] rc_core: IR keymap rc-hauppauge not found [ 878.132735][T22566] Registered IR keymap rc-empty [ 878.138947][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.166712][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.197218][T22566] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 878.212635][T22566] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 878.238748][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.268067][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.297582][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.326749][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.356735][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.386622][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.416600][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.446676][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.476670][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.496491][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 878.514702][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.521953][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 878.536554][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 878.556541][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 878.568197][T22566] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 878.576219][T22566] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 878.584719][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 878.596484][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 878.613101][T22566] usb 4-1: USB disconnect, device number 80 [ 878.619292][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:33:22 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2c, &(0x7f00000000c0)={[{0x27, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742"}]}) 12:33:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x9, &(0x7f0000002540)) 12:33:22 executing program 5: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) 12:33:22 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/207) 12:33:22 executing program 1: bpf$MAP_UPDATE_ELEM(0x1d, 0x0, 0x0) 12:33:22 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = fanotify_init(0x40, 0x2) fanotify_mark(r3, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r5, r5, &(0x7f0000000040), 0x7fff) 12:33:22 executing program 5: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) 12:33:22 executing program 2: bpf$MAP_UPDATE_ELEM(0x8, 0x0, 0x0) 12:33:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000b00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x4}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7555c0fabc8d53f7776e3eca6a98635691844016567badb163c896df053aa64"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e7044e50e2516ca59d5f927d45f019df173b6dfbddb44467b36fac093c212c0"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd6ec90d36fa5039027722fca39e9d3c034a181a6cbcdbdf5dcac3013d15045"}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bb142128a560f72710a0a7a4b1042e4415e2b86a5ce3e9af19a2b9e74335d19"}, @WGPEER_A_FLAGS={0x8}]}, {0x728, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75a398405eb35a52ef0d93a015165b86716873b8c73305d801261b34fcd10550"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a93041841dbaf92b4e73c85ff853ffd01c1658809cf2a0957d3ac0766ff844ca"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47c, 0x8, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) [ 879.170156][ T25] audit: type=1804 audit(1631277202.460:38): pid=28590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/724/file0/bus" dev="ramfs" ino=83506 res=1 errno=0 [ 879.243761][ T25] audit: type=1804 audit(1631277202.500:39): pid=28590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/724/file0/bus" dev="ramfs" ino=83506 res=1 errno=0 12:33:22 executing program 4: bpf$MAP_UPDATE_ELEM(0x1e, 0x0, 0x0) 12:33:22 executing program 2: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 12:33:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) [ 879.386859][T22566] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 879.636529][T22566] usb 4-1: Using ep0 maxpacket: 16 [ 879.768252][T22566] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.792232][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.826556][T22566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 879.836241][T22566] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 879.846732][T22566] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.936642][T22566] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.945888][T22566] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 879.956351][T22566] usb 4-1: Manufacturer: syz [ 879.968730][T22566] usb 4-1: config 0 descriptor?? [ 880.266483][T22566] rc_core: IR keymap rc-hauppauge not found [ 880.272468][T22566] Registered IR keymap rc-empty [ 880.278058][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.308504][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.340205][T22566] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 880.354968][T22566] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input63 [ 880.382281][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.426629][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.456711][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.486598][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.522037][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.556517][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.586554][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.616625][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.636438][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.646969][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.656445][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.676449][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.696555][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.702450][T22566] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.716431][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.736449][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.743244][T22566] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 880.752642][T22566] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 880.761125][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.776608][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 880.785669][T22566] usb 4-1: USB disconnect, device number 81 12:33:24 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2c, &(0x7f00000000c0)={[{0x27, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742"}]}) 12:33:24 executing program 1: syz_io_uring_setup(0x583, &(0x7f0000000000)={0x0, 0x512d, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 12:33:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x84000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = fanotify_init(0x40, 0x2) fanotify_mark(r3, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x20, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r5, r5, &(0x7f0000000040), 0x7fff) 12:33:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x0) 12:33:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, 0x0, 0x0) 12:33:24 executing program 2: syz_open_dev$sg(&(0x7f00000001c0), 0x9, 0x0) [ 881.303632][ T25] audit: type=1804 audit(1631277204.590:40): pid=28641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/725/file0/bus" dev="ramfs" ino=82660 res=1 errno=0 12:33:24 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 12:33:24 executing program 2: socket(0x10, 0x3, 0x42a6) 12:33:24 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) syz_io_uring_setup(0x58e7, &(0x7f0000000100), &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:33:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000005800)={'wg2\x00'}) [ 881.401322][ T25] audit: type=1804 audit(1631277204.590:41): pid=28641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/725/file0/bus" dev="ramfs" ino=82660 res=1 errno=0 12:33:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000240)={0xea, ""/234}) [ 881.556501][ T9859] usb 4-1: new high-speed USB device number 82 using dummy_hcd 12:33:24 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) [ 881.796672][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 881.928625][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.949016][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 881.971011][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 881.983187][ T9859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 881.994552][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.090153][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 882.112959][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 882.145252][ T9859] usb 4-1: Manufacturer: syz [ 882.153088][ T9859] usb 4-1: config 0 descriptor?? [ 882.456681][ T9859] rc_core: IR keymap rc-hauppauge not found [ 882.462625][ T9859] Registered IR keymap rc-empty [ 882.468081][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.497426][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.526851][ T9859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 882.541636][ T9859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64 [ 882.577760][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.606642][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.636553][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.667285][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.706534][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.736410][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.766433][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.796533][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.826314][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 882.833941][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.846320][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 882.866390][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 882.872280][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.886338][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 882.916392][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 882.917851][ T9859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 882.932350][ T9859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 882.940865][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 882.961607][ T9859] usb 4-1: USB disconnect, device number 82 [ 882.967618][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:26 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)={[{0x3a, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd46"}]}) 12:33:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000440)=""/42, 0x0, 0x2a}, 0x20) 12:33:26 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0x8) 12:33:26 executing program 1: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) 12:33:26 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 12:33:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000240)={0xea, ""/234}) 12:33:26 executing program 2: bpf$MAP_UPDATE_ELEM(0xd, 0x0, 0x0) 12:33:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="89"], 0x30}}, 0x0) 12:33:26 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 12:33:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x0, 0x0}) 12:33:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000240)={0xea, ""/234}) 12:33:27 executing program 2: io_uring_setup(0x207513, &(0x7f0000000140)={0x0, 0x0, 0x10}) [ 883.755404][ T9859] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 884.026356][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 884.146445][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.166463][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 884.191759][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 884.207342][ T9859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 884.218832][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.306481][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 884.315850][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 884.329313][ T9859] usb 4-1: Manufacturer: syz [ 884.335829][ T9859] usb 4-1: config 0 descriptor?? [ 884.646461][ T9859] rc_core: IR keymap rc-hauppauge not found [ 884.652406][ T9859] Registered IR keymap rc-empty [ 884.660868][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.698997][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.736833][ T9859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 884.758883][ T9859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65 [ 884.791635][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.836413][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.866392][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.896518][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.926929][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.956377][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 884.986406][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 885.016344][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 885.026404][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.046290][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.052459][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 885.066233][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.086309][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.092208][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 885.106246][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.126218][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.133216][ T9859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 885.141367][ T9859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 885.150001][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 885.159829][ T9859] usb 4-1: USB disconnect, device number 83 [ 885.166247][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:28 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)={[{0x3a, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd46"}]}) 12:33:28 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 12:33:28 executing program 5: timer_create(0x2, &(0x7f0000000040)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) 12:33:28 executing program 0: bpf$MAP_UPDATE_ELEM(0x21, 0x0, 0x0) 12:33:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000240)={0xea, ""/234}) 12:33:28 executing program 2: bpf$MAP_UPDATE_ELEM(0xc, 0x0, 0x0) 12:33:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)) 12:33:28 executing program 5: bpf$MAP_UPDATE_ELEM(0x7, 0x0, 0x0) 12:33:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 12:33:29 executing program 2: io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 12:33:29 executing program 4: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 12:33:29 executing program 4: io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) [ 886.046240][T17512] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 886.336567][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 886.476322][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.486582][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.499937][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 886.510474][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 886.520292][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.606417][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.615500][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.625088][T17512] usb 4-1: Manufacturer: syz [ 886.636905][T17512] usb 4-1: config 0 descriptor?? [ 886.946212][T17512] rc_core: IR keymap rc-hauppauge not found [ 886.952145][T17512] Registered IR keymap rc-empty [ 886.958313][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 886.988669][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.038670][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 887.054347][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 887.070444][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.106258][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.136263][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.166324][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.196255][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.226244][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.256307][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.286241][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.316933][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.329504][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.346276][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.352191][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.366137][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.386189][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.393397][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 887.401979][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 887.410452][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.426155][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.436460][T17512] usb 4-1: USB disconnect, device number 84 12:33:31 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)={[{0x3a, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd46"}]}) 12:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)) 12:33:31 executing program 5: shmget$private(0x0, 0x1000, 0xfeffffff, &(0x7f0000fff000/0x1000)=nil) 12:33:31 executing program 1: memfd_create(&(0x7f0000000680)='+#,^$\'.&}\x00', 0x0) 12:33:31 executing program 2: r0 = syz_io_uring_setup(0x181, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 12:33:31 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) 12:33:31 executing program 4: socket(0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000280)) 12:33:31 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x10442, 0x0) 12:33:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 12:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)) 12:33:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 12:33:31 executing program 1: io_setup(0x9, &(0x7f0000002540)=0x0) io_cancel(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_complete(0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000680)=0x6a) [ 888.226174][ T9859] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 888.486172][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 888.606898][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.617233][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.630162][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 888.641065][ T9859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 888.652323][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.746703][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 888.756564][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 888.764577][ T9859] usb 4-1: Manufacturer: syz [ 888.771613][ T9859] usb 4-1: config 0 descriptor?? [ 889.076132][ T9859] rc_core: IR keymap rc-hauppauge not found [ 889.082046][ T9859] Registered IR keymap rc-empty [ 889.088041][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.116735][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.146563][ T9859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 889.161248][ T9859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 889.211567][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.246255][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.276146][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.306194][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.337781][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.366162][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.396173][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.426380][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.446062][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.462174][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.469507][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.486070][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.506107][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.512071][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.526056][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.546067][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.552826][ T9859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 889.561053][ T9859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 889.569515][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 889.581343][ T9859] usb 4-1: USB disconnect, device number 85 [ 889.587382][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:33 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f00000000c0)={[{0x44, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c79"}]}) 12:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)) 12:33:33 executing program 5: bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) 12:33:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x800}]}) 12:33:33 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 12:33:33 executing program 1: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, r0+60000000}, &(0x7f0000000580)={&(0x7f0000000500)={[0x101]}, 0x8}) 12:33:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x36, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340)="55566f26e50028ea1376b7fbb5e982f26874d4341546fd108307dc5cf06d30aa236dda37222d7ba3b08913cef197b150f7d5de8b4eee", &(0x7f0000000040)=""/142, 0x0, 0x0, 0x0, &(0x7f0000000140)}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) 12:33:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x800}]}) 12:33:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x1, 0x0, 0x0, "01"}) 12:33:33 executing program 0: syz_io_uring_setup(0x6b18, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3ff9, &(0x7f0000000100), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:33:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x800}]}) 12:33:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 890.238972][T28906] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.316343][T17512] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 890.576286][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 890.696883][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.716029][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 890.736031][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 890.745729][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 890.755781][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.846904][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 890.856384][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.864438][T17512] usb 4-1: Manufacturer: syz [ 890.872039][T17512] usb 4-1: config 0 descriptor?? [ 891.176215][T17512] rc_core: IR keymap rc-hauppauge not found [ 891.182159][T17512] Registered IR keymap rc-empty [ 891.188757][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.226116][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.256598][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 891.285146][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input68 [ 891.311932][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.356324][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.386622][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.416189][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.446455][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.476069][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.506109][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.536123][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.566070][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.596071][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.628003][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 891.636756][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 891.665973][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 891.672967][T17512] usb 4-1: USB disconnect, device number 86 [ 891.685990][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:33:35 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f00000000c0)={[{0x44, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c79"}]}) 12:33:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x2, &(0x7f0000002340)=[{}, {0x2}]}) 12:33:35 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x31, 0x0, @tid=r1}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) clone(0x10101100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=r2}, &(0x7f00000000c0)) poll(0x0, 0x0, 0x204) r3 = memfd_create(&(0x7f00000007c0)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\xf6\xb2\xcc@\xe6A\xaa\xae\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\x1e\xe9\xd7\x8b\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6l\xde\xd0\xca*(\x00\x00\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) fcntl$setlease(r3, 0x400, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x11, 0x1, @thr={&(0x7f0000000340), &(0x7f00000003c0)}}, &(0x7f00000004c0)) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000700)='\x00', 0x0, 0x0, 0x1000) 12:33:35 executing program 5: syz_io_uring_setup(0x7094, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:33:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={0x0}}, 0x0) 12:33:35 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x800}]}) 12:33:35 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xfffffffffffffeff}, 0x0, 0x0) 12:33:35 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/12) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x100000001, 0x8241) r2 = io_uring_setup(0x207513, &(0x7f0000000140)={0x0, 0xf70f, 0x10, 0x2, 0x345}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) io_uring_setup(0x6ee5, &(0x7f00000000c0)={0x0, 0xf24a, 0x20, 0x1, 0x219, 0x0, r2}) r3 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) 12:33:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) 12:33:35 executing program 2: bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) 12:33:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)) 12:33:35 executing program 2: socket(0xa, 0x1, 0x9) [ 892.616013][T17512] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 892.660790][T28977] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.886257][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 893.017038][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.040783][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.065646][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 893.079364][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 893.098018][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.216031][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 893.225107][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 893.233745][T17512] usb 4-1: Manufacturer: syz [ 893.240739][T17512] usb 4-1: config 0 descriptor?? [ 893.536208][T17512] rc_core: IR keymap rc-hauppauge not found [ 893.542124][T17512] Registered IR keymap rc-empty [ 893.548008][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.588063][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.626948][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 893.641746][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 893.667652][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.706125][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.736352][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.766108][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.796116][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.825977][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.856004][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.886034][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.927996][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.956063][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.997548][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 894.005571][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 894.025872][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 894.032845][T17512] usb 4-1: USB disconnect, device number 87 [ 894.045870][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:33:37 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f00000000c0)={[{0x44, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c79"}]}) 12:33:37 executing program 0: io_setup(0x9, &(0x7f0000002540)=0x0) io_cancel(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 12:33:37 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 12:33:37 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4842, 0x0) syz_io_uring_complete(0x0) 12:33:37 executing program 2: syz_io_uring_setup(0x44db, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:33:37 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f00000057c0), 0x0, 0x0) 12:33:38 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 12:33:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 12:33:38 executing program 0: r0 = syz_io_uring_setup(0x181, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 12:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000700)=0xd, 0x4) 12:33:38 executing program 4: bpf$MAP_UPDATE_ELEM(0x1c, 0x0, 0x0) [ 894.995833][ T1735] usb 4-1: new high-speed USB device number 88 using dummy_hcd 12:33:38 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4842, 0x0) syz_io_uring_complete(0x0) [ 895.255991][ T1735] usb 4-1: Using ep0 maxpacket: 16 [ 895.376826][ T1735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.391707][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.429260][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 895.452721][ T1735] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 895.474364][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.586799][ T1735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 895.596430][ T1735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 895.604439][ T1735] usb 4-1: Manufacturer: syz [ 895.615527][ T1735] usb 4-1: config 0 descriptor?? [ 895.935875][ T1735] rc_core: IR keymap rc-hauppauge not found [ 895.941792][ T1735] Registered IR keymap rc-empty [ 895.951758][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 895.990449][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.026952][ T1735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 896.041018][ T1735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 896.076717][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.105851][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.135938][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.165908][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.195879][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.225879][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.255943][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.287961][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.315866][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.346054][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.377564][ T1735] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 896.387645][ T1735] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 896.396149][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 896.405244][ T1735] usb 4-1: USB disconnect, device number 88 12:33:40 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x49, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561"}]}) 12:33:40 executing program 5: timer_create(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) 12:33:40 executing program 0: pipe2$9p(&(0x7f00000004c0), 0x0) 12:33:40 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4842, 0x0) syz_io_uring_complete(0x0) 12:33:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x0) 12:33:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:33:40 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x37, 0xffffffffffffffff, 0x0) 12:33:40 executing program 5: syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) 12:33:40 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x59564c0dd0bc6b7a, 0xffffffffffffffff, 0x8000000) 12:33:40 executing program 4: io_setup(0x9, &(0x7f0000002540)) 12:33:40 executing program 0: io_uring_setup(0x1929, &(0x7f0000000000)={0x0, 0x1000abc7, 0xc}) 12:33:40 executing program 4: syz_io_uring_setup(0x583, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 897.405827][T13826] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 897.695887][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 897.845984][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.856278][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 897.870408][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 897.881550][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 897.893153][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.996819][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 898.006160][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 898.014262][T13826] usb 4-1: Manufacturer: syz [ 898.027240][T13826] usb 4-1: config 0 descriptor?? [ 898.366128][T13826] rc_core: IR keymap rc-hauppauge not found [ 898.372073][T13826] Registered IR keymap rc-empty [ 898.377905][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.415809][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.446339][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 898.468433][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input71 [ 898.504764][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.545808][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.575832][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.607058][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.635806][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.665753][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.696768][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.725749][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.755758][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.785729][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 898.817074][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 898.825122][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 898.835643][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 898.855685][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 898.864610][T13826] usb 4-1: USB disconnect, device number 89 [ 898.875679][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:42 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x49, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561"}]}) 12:33:42 executing program 5: io_setup(0x9, &(0x7f0000002540)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 12:33:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000052c0), 0xffffffffffffffff) 12:33:42 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_setup(0xffff, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4842, 0x0) syz_io_uring_complete(0x0) 12:33:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 12:33:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 12:33:42 executing program 0: bpf$MAP_UPDATE_ELEM(0x9, 0x0, 0x0) 12:33:42 executing program 4: bpf$MAP_UPDATE_ELEM(0x5, 0x0, 0x0) 12:33:42 executing program 2: sched_getaffinity(0x0, 0x8, &(0x7f0000000140)) 12:33:42 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 12:33:42 executing program 2: bpf$MAP_UPDATE_ELEM(0x23, 0x0, 0x0) 12:33:42 executing program 0: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) [ 899.806224][ T9859] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 900.075672][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 900.235996][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.261722][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.274994][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 900.286211][ T9859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 900.305580][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.436846][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 900.446126][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 900.454114][ T9859] usb 4-1: Manufacturer: syz [ 900.461857][ T9859] usb 4-1: config 0 descriptor?? [ 900.795742][ T9859] rc_core: IR keymap rc-hauppauge not found [ 900.801685][ T9859] Registered IR keymap rc-empty [ 900.808269][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.845674][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.886156][ T9859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 900.900397][ T9859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 900.927322][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.957965][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.995742][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.035839][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.065663][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.095733][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.125665][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.166616][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.195664][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.225722][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.259420][ T9859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 901.267521][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 901.274632][ T9859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 901.295549][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 901.315632][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 901.324179][ T9859] usb 4-1: USB disconnect, device number 90 12:33:45 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x49, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561"}]}) 12:33:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 12:33:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 12:33:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000054c0)='cpu.stat\x00', 0x0, 0x0) 12:33:45 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) 12:33:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "f37b70333a1ca735", "581e3110c31bd2031e946546d79581c9", "ef00746c", "5d097f341030512d"}, 0x28) 12:33:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x1, &(0x7f0000002340)=[{}]}) 12:33:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 12:33:45 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 12:33:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) 12:33:45 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 12:33:45 executing program 0: bpf$MAP_UPDATE_ELEM(0xb, 0x0, 0x0) [ 902.255655][T13826] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 902.545630][T13826] usb 4-1: Using ep0 maxpacket: 16 [ 902.687099][T13826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.697753][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.710263][T13826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 902.720754][T13826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 902.731271][T13826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.825761][T13826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 902.834929][T13826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.844424][T13826] usb 4-1: Manufacturer: syz [ 902.851362][T13826] usb 4-1: config 0 descriptor?? [ 903.185504][T13826] rc_core: IR keymap rc-hauppauge not found [ 903.191587][T13826] Registered IR keymap rc-empty [ 903.197854][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.239968][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.276025][T13826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 903.301219][T13826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input73 [ 903.322323][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.365790][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.395560][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.425716][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.455580][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.488021][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.515577][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.555586][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.585643][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.625639][T13826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 903.645469][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 903.665537][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 903.672478][T13826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 903.680746][T13826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 903.689400][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 903.698560][T13826] usb 4-1: USB disconnect, device number 91 [ 903.705811][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:47 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x4b, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046"}]}) 12:33:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 12:33:47 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000054c0)='cpu.stat\x00', 0x0, 0x0) 12:33:47 executing program 2: waitid(0x2, 0x0, 0x0, 0x5, &(0x7f0000000280)) 12:33:47 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000280), 0x8}) 12:33:47 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x100000001, 0x8241) 12:33:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 12:33:47 executing program 1: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000005c80)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x0) 12:33:47 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x4c}, 0x4c}}, 0x0) 12:33:47 executing program 2: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000bc0)=@can, 0x80, 0x0, 0x0, &(0x7f0000000c80)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40002040, &(0x7f0000004c80)={0x77359400}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8000) 12:33:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0xc01047d0, 0x0) 12:33:47 executing program 4: r0 = syz_io_uring_setup(0x583, &(0x7f0000000000)={0x0, 0x512d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000006, 0x13, r0, 0x0) [ 904.485589][T17512] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 904.755501][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 904.885517][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.900373][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.925693][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 904.937607][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 904.948720][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.036506][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 905.046933][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 905.054944][T17512] usb 4-1: Manufacturer: syz [ 905.070012][T17512] usb 4-1: config 0 descriptor?? [ 905.375520][T17512] rc_core: IR keymap rc-hauppauge not found [ 905.381561][T17512] Registered IR keymap rc-empty [ 905.391647][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.437030][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.469080][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 905.492380][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 905.521619][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.565720][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.595803][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.635809][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.666164][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.705507][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.735976][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.766355][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.795468][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.835507][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 905.867841][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 905.877502][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 905.885980][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 905.905557][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 905.912512][T17512] usb 4-1: USB disconnect, device number 92 12:33:49 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x4b, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046"}]}) 12:33:49 executing program 2: io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:33:49 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r0 = io_uring_setup(0x207513, &(0x7f0000000140)={0x0, 0x0, 0x10}) io_uring_setup(0x6ee5, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 12:33:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 12:33:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) 12:33:49 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x7) 12:33:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) dup3(r1, r0, 0x0) 12:33:49 executing program 0: r0 = syz_io_uring_setup(0x583, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 12:33:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 12:33:49 executing program 1: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) 12:33:49 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101040) 12:33:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='g', 0x1}], 0x1) [ 906.857917][T17512] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 907.155547][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 907.295695][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.306025][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 907.319480][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 907.329833][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 907.340471][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.436003][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 907.445071][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 907.454908][T17512] usb 4-1: Manufacturer: syz [ 907.462674][T17512] usb 4-1: config 0 descriptor?? [ 907.785477][T17512] rc_core: IR keymap rc-hauppauge not found [ 907.791583][T17512] Registered IR keymap rc-empty [ 907.797707][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.835775][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.870810][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 907.885379][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input75 [ 907.909979][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.945527][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.975669][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.005427][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.035482][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.065414][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.095467][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.125401][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.155411][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.185387][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.217606][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 908.226077][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 908.238347][T17512] usb 4-1: USB disconnect, device number 93 [ 908.245267][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:33:52 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x4b, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046"}]}) 12:33:52 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r2, r2, &(0x7f0000000040), 0x7fff) 12:33:52 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:33:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) dup3(r1, r0, 0x0) 12:33:52 executing program 2: io_setup(0xffffe52a, &(0x7f0000000000)) 12:33:52 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:33:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 12:33:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2201, &(0x7f0000000100)) 12:33:52 executing program 5: waitid(0x0, 0x0, 0x0, 0x5, 0x0) 12:33:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) dup3(r1, r0, 0x0) 12:33:52 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r2, r2, &(0x7f0000000040), 0x7fff) 12:33:52 executing program 2: io_setup(0x4, &(0x7f0000000280)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x8}]) [ 909.175325][T17512] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 909.425330][T17512] usb 4-1: Using ep0 maxpacket: 16 [ 909.546248][T17512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.562370][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.587123][T17512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.602459][T17512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 909.614388][T17512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.705362][T17512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 909.714440][T17512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 909.738860][T17512] usb 4-1: Manufacturer: syz [ 909.757923][T17512] usb 4-1: config 0 descriptor?? [ 910.055822][T17512] rc_core: IR keymap rc-hauppauge not found [ 910.061765][T17512] Registered IR keymap rc-empty [ 910.068398][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.105755][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.145265][T17512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 910.160717][T17512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input76 [ 910.188072][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.225446][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.255293][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.285417][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.315316][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.345365][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.375251][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.405395][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.435631][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.468909][T17512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.507518][T17512] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 910.517634][T17512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 910.526325][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 910.535905][T17512] usb 4-1: USB disconnect, device number 94 [ 910.545210][ C0] mceusb 4-1:0.0: Error: urb status = -71 12:33:54 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x4c, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d3"}]}) 12:33:54 executing program 5: syz_io_uring_setup(0x3ff9, &(0x7f0000000100)={0x0, 0x9b07, 0x8, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:33:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2201, &(0x7f0000000100)) 12:33:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) dup3(r1, r0, 0x0) 12:33:54 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r2, r2, &(0x7f0000000040), 0x7fff) 12:33:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)) 12:33:54 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x40880, 0x0) 12:33:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2201, &(0x7f0000000100)) 12:33:54 executing program 5: syz_io_uring_setup(0x3ff9, &(0x7f0000000100)={0x0, 0x9b07, 0x8, 0x1, 0x258}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:33:54 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x2) fanotify_mark(0xffffffffffffffff, 0x45, 0x8000000, 0xffffffffffffff9c, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r2, r2, &(0x7f0000000040), 0x7fff) 12:33:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 12:33:54 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={&(0x7f0000000500), 0xc, 0x0}, 0x0) [ 911.465283][ T1735] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 911.735386][ T1735] usb 4-1: Using ep0 maxpacket: 16 [ 911.886019][ T1735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.896414][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 911.910636][ T1735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 911.921710][ T1735] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 911.933559][ T1735] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.055344][ T1735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 912.064525][ T1735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 912.073162][ T1735] usb 4-1: Manufacturer: syz [ 912.081880][ T1735] usb 4-1: config 0 descriptor?? [ 912.405135][ T1735] rc_core: IR keymap rc-hauppauge not found [ 912.412511][ T1735] Registered IR keymap rc-empty [ 912.419055][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.455366][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.495805][ T1735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 912.510554][ T1735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input77 [ 912.551351][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.595351][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.626885][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.667034][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.695269][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.725200][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.755150][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.795232][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.835178][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.865281][ T1735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 912.885216][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 912.896455][ T1735] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 912.904485][ T1735] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 912.913110][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 912.935078][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 912.954480][ T1735] usb 4-1: USB disconnect, device number 95 [ 912.960594][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:56 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x4c, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d3"}]}) 12:33:56 executing program 5: io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x5899078e3574979e}) 12:33:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2201, &(0x7f0000000100)) 12:33:56 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20401, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 12:33:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:33:56 executing program 1: io_setup(0x9, &(0x7f0000002540)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f00000022c0)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x3a8da834422129b6}]) 12:33:56 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000a00), &(0x7f0000000a40)=0x30) 12:33:56 executing program 5: bpf$MAP_UPDATE_ELEM(0xe, 0x0, 0x0) 12:33:56 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x86140, 0x0) 12:33:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f00)=[{0x0}, {0x0}], 0x2}, 0x10002) 12:33:56 executing program 1: syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x8002) 12:33:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x2, &(0x7f0000002340)=[{}, {0x2, 0x0, 0x0, 0x21}]}) [ 913.785204][ T9859] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 914.035344][ T9859] usb 4-1: Using ep0 maxpacket: 16 [ 914.159942][ T9859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.170907][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.184287][ T9859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 914.201840][ T9859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 914.211962][ T9859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.316039][ T9859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 914.328276][ T9859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 914.337463][ T9859] usb 4-1: Manufacturer: syz [ 914.343824][ T9859] usb 4-1: config 0 descriptor?? [ 914.675154][ T9859] rc_core: IR keymap rc-hauppauge not found [ 914.681072][ T9859] Registered IR keymap rc-empty [ 914.691304][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.725098][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.755687][ T9859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 914.772311][ T9859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 914.805163][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.835311][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.865185][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.905169][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.935932][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.965097][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.995117][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.026112][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.055205][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.095352][ T9859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.131633][ T9859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 915.141233][ T9859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 915.149754][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 915.158694][ T9859] usb 4-1: USB disconnect, device number 96 [ 915.165028][ C1] mceusb 4-1:0.0: Error: urb status = -71 12:33:58 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f00000000c0)={[{0x4c, 0x4e00, "4d1814988d125c5b6c46d75c3ae64cda7cc0df1776098bb0b8554adcd5db4af7ac5ce922ebf742e9faa2a9b312d38c4afcc4c3a0d728a9d2fd461027ffc91247230d1c791f106c9561b046d3"}]}) 12:33:58 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000640), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 12:33:58 executing program 4: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2085, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x37f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) socket$netlink(0x10, 0x3, 0xa) 12:33:58 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 12:33:58 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_gettime(0x0, 0x0) 12:33:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="4d0e9b5b081b4d559b33", 0xa}], 0x1) 12:33:59 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_io_uring_setup(0x2f26, &(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 12:33:59 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00), 0x101001, 0x0) 12:33:59 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0x26, 0x0, 0x0, &(0x7f0000004900)) 12:33:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4842, 0x0) 12:33:59 executing program 4: bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001000010400000000fcdbdf2500800000", @ANYRES32=0x0, @ANYBLOB="b84202000a2a0400a800128009000100766c616e000b0000980002800600010002000000880004800c000100040020001f0000000c00010007000000050000000c000100fc030000e43900000c00010007000000090000000c00010001000000730c00000c000100e7d10000070000000c000100a3ca0000010000000c00010008000000fcffffff0c00010008000000aea100000c00010009000000050000000c000100fffffefffaffffff0400038008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xd8}}, 0x40000) 12:33:59 executing program 2: syz_io_uring_setup(0x6540, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 916.075159][T17507] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 916.345121][T17507] usb 4-1: Using ep0 maxpacket: 16 [ 916.465842][T17507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.476115][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.502908][T17507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 916.513593][T17507] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 916.523401][T17507] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.615970][T17507] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 916.625259][T17507] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 916.633267][T17507] usb 4-1: Manufacturer: syz [ 916.640760][T17507] usb 4-1: config 0 descriptor?? [ 916.945015][T17507] rc_core: IR keymap rc-hauppauge not found [ 916.951113][T17507] Registered IR keymap rc-empty [ 916.957090][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 916.985047][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.016106][T17507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 917.032567][T17507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 917.066702][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.095077][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.125696][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.155020][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.185156][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.215394][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.245089][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.275006][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.306339][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.335088][T17507] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 917.366222][T17507] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 917.374355][T17507] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 917.410905][T17507] usb 4-1: USB disconnect, device number 97 12:34:01 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580)={&(0x7f0000000500)={[0x101]}, 0x8}) 12:34:01 executing program 5: r0 = memfd_create(&(0x7f0000000080)='*{[(.^\x00', 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc020660b, 0x0) 12:34:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:34:01 executing program 4: bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001000010400000000fcdbdf2500800000", @ANYRES32=0x0, @ANYBLOB="b84202000a2a0400a800128009000100766c616e000b0000980002800600010002000000880004800c000100040020001f0000000c00010007000000050000000c000100fc030000e43900000c00010007000000090000000c00010001000000730c00000c000100e7d10000070000000c000100a3ca0000010000000c00010008000000fcffffff0c00010008000000aea100000c00010009000000050000000c000100fffffefffaffffff0400038008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xd8}}, 0x40000) 12:34:01 executing program 2: bind$alg(0xffffffffffffffff, 0x0, 0x0) 12:34:01 executing program 3: syz_io_uring_setup(0x2085, &(0x7f0000005a80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 12:34:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x4e22}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='wlan1\x00', 0x5, 0x5f9a, 0x1}) socket$inet(0x2, 0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r0, 0x0, 0x0, 0x24040845) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast2, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000b00)=0xe8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x20a900}], 0xaa, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 12:34:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f00000006c0)=0xc) setuid(r2) 12:34:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002500)={&(0x7f00000009c0), 0xc, &(0x7f00000024c0)={0x0}}, 0x0) 12:34:01 executing program 4: bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001000010400000000fcdbdf2500800000", @ANYRES32=0x0, @ANYBLOB="b84202000a2a0400a800128009000100766c616e000b0000980002800600010002000000880004800c000100040020001f0000000c00010007000000050000000c000100fc030000e43900000c00010007000000090000000c00010001000000730c00000c000100e7d10000070000000c000100a3ca0000010000000c00010008000000fcffffff0c00010008000000aea100000c00010009000000050000000c000100fffffefffaffffff0400038008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xd8}}, 0x40000) 12:34:01 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x100000) 12:34:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 12:34:01 executing program 3: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x400}, &(0x7f0000000180)={0x0, r0/1000+60000}) 12:34:01 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_pts(r2, 0x40200) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) write$binfmt_elf64(r0, 0x0, 0xb5d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) dup3(r3, r1, 0x0) 12:34:02 executing program 1: syz_open_dev$sg(&(0x7f00000001c0), 0x4, 0x8002) 12:34:02 executing program 4: bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001000010400000000fcdbdf2500800000", @ANYRES32=0x0, @ANYBLOB="b84202000a2a0400a800128009000100766c616e000b0000980002800600010002000000880004800c000100040020001f0000000c00010007000000050000000c000100fc030000e43900000c00010007000000090000000c00010001000000730c00000c000100e7d10000070000000c000100a3ca0000010000000c00010008000000fcffffff0c00010008000000aea100000c00010009000000050000000c000100fffffefffaffffff0400038008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xd8}}, 0x40000) 12:34:02 executing program 5: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)) 12:34:02 executing program 3: io_setup(0x9, &(0x7f0000002540)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='uL', 0x2, 0x1f}]) 12:34:02 executing program 0: bpf$MAP_UPDATE_ELEM(0xa, 0x0, 0x0) 12:34:02 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_pts(r2, 0x40200) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) write$binfmt_elf64(r0, 0x0, 0xb5d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) dup3(r3, r1, 0x0) 12:34:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 12:34:02 executing program 0: open$dir(&(0x7f0000002b00)='./file0\x00', 0x40, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x112) 12:34:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RWALK(r0, 0x0, 0x4a) 12:34:02 executing program 3: r0 = socket(0x2, 0x3, 0x6) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 12:34:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0xd200, 0x103) 12:34:02 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_pts(r2, 0x40200) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) write$binfmt_elf64(r0, 0x0, 0xb5d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) dup3(r3, r1, 0x0) 12:34:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0xc1, 0x10) 12:34:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 12:34:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x19) 12:34:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x20040, 0x0) 12:34:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x0) 12:34:02 executing program 0: socket(0x2, 0x3, 0x6) 12:34:02 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_pts(r2, 0x40200) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) write$binfmt_elf64(r0, 0x0, 0xb5d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) dup3(r3, r1, 0x0) 12:34:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r0, 0xee01, 0x0) 12:34:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 12:34:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x0) 12:34:03 executing program 1: statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 12:34:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000240)='./file0\x00', 0xee00, 0x0, 0x1000) 12:34:03 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2118372136e94fad, 0x0) ftruncate(r0, 0x0) ftruncate(r0, 0x0) 12:34:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x130) 12:34:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0xc1, 0x0) 12:34:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x150) 12:34:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x20, 0x0) 12:34:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) write$FUSE_WRITE(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 12:34:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = getuid() fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x0) 12:34:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') 12:34:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x40, 0x103) 12:34:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x141, 0x0) 12:34:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/173, 0xad) 12:34:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x2000, 0x103) 12:34:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000008c0)='.log\x00', 0x10d740, 0x0) 12:34:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) 12:34:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 12:34:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000100)=[0x0]) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xee01, r0, 0x1000) 12:34:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x110) 12:34:03 executing program 0: r0 = socket(0x1, 0x3, 0x0) write$FUSE_STATFS(r0, 0x0, 0x5f) 12:34:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x141, 0x8) 12:34:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0xc0) 12:34:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000008c0)='.log\x00', 0x140, 0x0) 12:34:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000100)='.\x00', 0x0) 12:34:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8904, &(0x7f0000000a40)={'vlan1\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) 12:34:04 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 12:34:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 12:34:04 executing program 2: open$dir(&(0x7f0000002b00)='./file0\x00', 0x40, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x150) 12:34:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x0) 12:34:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xee00, 0x0, 0x0) 12:34:04 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000100)={0x18}, 0xfffffffffffffec3) 12:34:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x10, 0x0) 12:34:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) 12:34:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') 12:34:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x8000, 0x103) 12:34:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x112) 12:34:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0xb1) 12:34:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x8) 12:34:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 12:34:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x200, 0x0) 12:34:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file0\x00', 0x0) 12:34:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x1000) 12:34:04 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x40, 0x80) 12:34:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xee01, 0xee01, 0x1000) 12:34:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) 12:34:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="db", 0x1}], 0x1}}], 0x1, 0x24048000) 12:34:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) fchownat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xee00, 0x1000) 12:34:05 executing program 0: r0 = socket(0x1, 0x3, 0x0) write$9p(r0, 0x0, 0x0) 12:34:05 executing program 4: r0 = socket(0x1, 0x1, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 12:34:05 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0) fchownat(r0, &(0x7f0000000040)='\x00', 0x0, 0xffffffffffffffff, 0x1000) 12:34:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x400, 0x103) 12:34:05 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, 0x0, 0x4a) 12:34:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8}) 12:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)=@pppol2tp={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x24048000) 12:34:05 executing program 3: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x7fffefff, 0x0) 12:34:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x9}, 0x1c, 0x0}, 0x0) 12:34:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006100)=[{{&(0x7f0000000200)={0x2, 0x4e20, @private}, 0x10, &(0x7f0000000240)=[{&(0x7f00000005c0)="9cd17cbdfd3237dc13ea4586", 0xc}], 0x1}}], 0x1, 0x0) 12:34:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001fc0)) 12:34:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x20, 0x0, 0x2000000000dc41) 12:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:05 executing program 3: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x7fffefff, 0x0) 12:34:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@dev}}, [@policy_type={0xa}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 12:34:06 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x90200, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) 12:34:06 executing program 3: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x7fffefff, 0x0) 12:34:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000066c0)={0x2020}, 0x2020) 12:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:34:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 5: fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0x0) 12:34:06 executing program 3: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x7fffefff, 0x0) 12:34:06 executing program 0: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) 12:34:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1, {[@end, @end, @generic={0x0, 0xf, "5abc308260283b183bd27b3b5f"}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @multicast1, @local, @local]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end]}}}}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="37a197b48ab7f2740000000008004efbffa0d06df97db3119b5c90445a6053438d7f", 0x22, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x2, 0xfd, 0xb, 0x2000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x800}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 12:34:06 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 12:34:06 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 12:34:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x27, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x87, 0x87, 0x3, [@volatile, @struct, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], '\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "96"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'Z'}]}, {0x0, [0x0]}}, 0x0, 0xa3}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x1d) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:34:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/locks\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) 12:34:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x26, 0x2880000000) 12:34:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:07 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200003, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) 12:34:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:34:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}, 0x0) 12:34:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/locks\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) 12:34:07 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/\x00') 12:34:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsync(r0) 12:34:07 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 12:34:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:34:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 12:34:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsync(r0) 12:34:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/locks\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) 12:34:07 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="b7", 0x1}, {&(0x7f0000000140)="12", 0x1}], 0x2, 0x0) 12:34:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:34:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) r1 = socket(0x2, 0x3, 0x100000001) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x0, 0x0, 0x0) 12:34:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsync(r0) 12:34:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/locks\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) 12:34:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)='%', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0) 12:34:08 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x80000001}, 0x8) 12:34:08 executing program 5: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0xdfc2e90be34a870d) 12:34:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'team_slave_0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 12:34:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:34:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsync(r0) 12:34:08 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:34:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 12:34:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 12:34:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x17, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup2(r0, r1) 12:34:08 executing program 1: select(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, 0x0) 12:34:08 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 12:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='illinois\x00', 0x9) 12:34:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "7f9a6470defc144e", "a0f7ff58534d5cb466974b587785dd52", "19886e4f", "b00e9653ab52c0d8"}, 0x28) 12:34:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:34:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 12:34:08 executing program 0: waitid(0x0, 0x0, 0x0, 0xa0000002, 0x0) 12:34:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) 12:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='illinois\x00', 0x9) 12:34:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 12:34:08 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$rtc(&(0x7f0000000000), 0xc80, 0x2000) 12:34:08 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001900)=[{0x0, 0xfffffcca}], 0x1, 0x0) 12:34:08 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='illinois\x00', 0x9) 12:34:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) [ 925.691929][T30107] rtc_cmos 00:00: Alarms can be up to one day in the future [ 925.733861][T30107] rtc_cmos 00:00: Alarms can be up to one day in the future 12:34:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xd0) 12:34:09 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x40041, 0x0) 12:34:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='illinois\x00', 0x9) 12:34:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x17, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:34:09 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$rtc(&(0x7f0000000000), 0xc80, 0x2000) 12:34:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) [ 925.966212][T30122] rtc_cmos 00:00: Alarms can be up to one day in the future 12:34:09 executing program 3: timer_create(0x0, 0x0, &(0x7f0000001140)) timer_delete(0x0) 12:34:09 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) 12:34:09 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000003dc0), 0x4200, 0x0) 12:34:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 12:34:09 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$rtc(&(0x7f0000000000), 0xc80, 0x2000) 12:34:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:09 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) [ 926.274157][T30136] rtc_cmos 00:00: Alarms can be up to one day in the future 12:34:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) 12:34:09 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) 12:34:09 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$rtc(&(0x7f0000000000), 0xc80, 0x2000) 12:34:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 12:34:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 12:34:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)) 12:34:09 executing program 3: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000140), 0x8) 12:34:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) write$binfmt_elf64(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x38, 0x0, 0x5, 0x40}, [{0x6, 0x0, 0xffff}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x878) sendfile(r0, r0, 0x0, 0x24002da8) [ 926.613496][T30151] rtc_cmos 00:00: Alarms can be up to one day in the future 12:34:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 12:34:10 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x98000, 0x0) 12:34:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x3b, 0x0, 0xdc41) 12:34:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 12:34:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:34:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{0x0}, {0x0}], 0x2, &(0x7f0000001240)=""/247, 0xf7}}], 0x1, 0x0, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:34:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 12:34:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:10 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12:34:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) 12:34:10 executing program 5: futex(&(0x7f0000000000), 0x3, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 12:34:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x22, 0x0, 0x9) 12:34:10 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000003b80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) 12:34:10 executing program 2: fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0xee01, 0x1000) 12:34:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000600)="4d53418a", 0x4) 12:34:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:34:10 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040, 0x0) 12:34:10 executing program 5: clock_gettime(0x0, &(0x7f0000000140)={0x0}) select(0x40, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000180)={r0}) 12:34:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 12:34:10 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000002280)={0xc4, 0x8000}, 0x0) 12:34:10 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 12:34:10 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)=ANY=[], 0x1f) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}}}, 0x60) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 12:34:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r1, &(0x7f000000c780)={0x10}, 0x10) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 12:34:11 executing program 5: ioprio_set$pid(0x0, 0x0, 0x3) 12:34:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) 12:34:11 executing program 2: r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 12:34:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)=ANY=[], 0x10) 12:34:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000500)={'team_slave_0\x00', @ifru_mtu}) 12:34:11 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)=ANY=[], 0x1f) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}}}, 0x60) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 12:34:11 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 12:34:11 executing program 2: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x220030, &(0x7f0000000180)='\x00') chdir(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x8) chdir(&(0x7f0000000040)='./file0\x00') rmdir(&(0x7f00000001c0)='./file0\x00') 12:34:11 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) read$FUSE(r0, 0x0, 0x0) 12:34:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000004380)={&(0x7f0000003540), 0xc, &(0x7f0000004340)={&(0x7f0000003fc0)={0x14}, 0x14}}, 0x0) [ 928.149387][T30233] new mount options do not match the existing superblock, will be ignored 12:34:11 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 12:34:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 12:34:11 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000107010100000000000000000000001a140007"], 0x28}}, 0x0) 12:34:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x200029, 0x4) 12:34:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x10000) 12:34:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:34:11 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000406ff0853f0000000000000000008ff050004ff98ec10000900a2007321823000a300000700010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2e5) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) [ 928.444674][T30247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:34:11 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)=ANY=[], 0x1f) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}}}, 0x60) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 12:34:11 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mknodat$null(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0x103) [ 928.571653][T30255] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 928.578677][T30258] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:34:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001300)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 928.630348][T30258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 12:34:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000000)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 12:34:12 executing program 0: pipe(&(0x7f0000004240)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0xffffffffffffff58) 12:34:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) 12:34:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x3) 12:34:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) 12:34:12 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x20) 12:34:12 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001d80)={0x0, 0x989680}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001fc0)) 12:34:12 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)=ANY=[], 0x1f) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}}}, 0x60) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 12:34:12 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000406ff0853f0000000000000000008ff050004ff98ec10000900a2007321823000a300000700010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2e5) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) 12:34:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xb00d, 0xa2d5) 12:34:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f00000010c0)=""/191, 0xbf}, {&(0x7f0000001180)=""/94, 0x5e}], 0x2, &(0x7f0000001240)=""/247, 0xf7}}], 0x1, 0x2100, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c80)={0x78, 0x0, 0x4, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}}, 0x20000080) 12:34:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xb00d, 0xa2d5) 12:34:12 executing program 2: sysfs$2(0x2, 0x4, &(0x7f0000000400)=""/71) [ 929.619022][T30302] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 929.667122][T30302] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 12:34:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 12:34:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 12:34:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xb00d, 0xa2d5) [ 931.176013][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.182418][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 12:34:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) 12:34:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}}) 12:34:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000061c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 12:34:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) 12:34:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xb00d, 0xa2d5) 12:34:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000406ff0853f0000000000000000008ff050004ff98ec10000900a2007321823000a300000700010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2e5) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) 12:34:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) [ 932.169483][T30334] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:34:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) 12:34:15 executing program 0: memfd_create(&(0x7f0000000000)='/dev/nvram\x00', 0x3) [ 932.216214][T30334] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 12:34:15 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 12:34:15 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x40041, 0x0) 12:34:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0) 12:34:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) 12:34:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)='%', 0x1}, {&(0x7f0000000180)='W', 0x1}], 0x3}}], 0x1, 0x0) 12:34:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xffffffffffffffa4) 12:34:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x27, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x87, 0x87, 0x2, [@volatile, @struct, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], '\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "96"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'Z'}]}}, 0x0, 0xa2}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x1d) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:34:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000406ff0853f0000000000000000008ff050004ff98ec10000900a2007321823000a300000700010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2e5) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) 12:34:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@abs, 0x6e, 0x0}}], 0x2, 0x0) 12:34:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) 12:34:18 executing program 3: wait4(0x0, 0x0, 0x0, &(0x7f0000000040)) [ 935.339387][T30375] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 935.369141][T30375] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 12:34:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000001440)="8b", 0x1}], 0x1, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000001680)={0x10}, 0x10) 12:34:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000004380)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004340)={&(0x7f0000003fc0)={0x14}, 0x14}}, 0x0) 12:34:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 12:34:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001900)=[{0x0}], 0x1, 0x0) 12:34:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) 12:34:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) 12:34:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="a6", 0x1}], 0x1) 12:34:21 executing program 2: memfd_create(&(0x7f0000000040)='\x00', 0x5) 12:34:21 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c40), 0x206043, 0x0) 12:34:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x0) 12:34:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='hybla\x00', 0x6) 12:34:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 12:34:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xee00, 0xffffffffffffffff, 0x0) 12:34:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @private, 0x0, 0x0, 'wlan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team_slave_0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x4008003, 0x32fe3cf1}, 0x14) sendfile(r1, r0, 0x0, 0x4000000000edb8) 12:34:22 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 12:34:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @private, 0x0, 0x0, 'wlan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team_slave_0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x4008003, 0x32fe3cf1}, 0x14) sendfile(r1, r0, 0x0, 0x4000000000edb8) 12:34:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @private, 0x0, 0x0, 'wlan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team_slave_0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x4008003, 0x32fe3cf1}, 0x14) sendfile(r1, r0, 0x0, 0x4000000000edb8) 12:34:24 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) 12:34:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)="12", 0x1}], 0x2, 0x0) 12:34:24 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) 12:34:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 12:34:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000078c0)=ANY=[@ANYBLOB="a0330000", @ANYRES16=0x0, @ANYBLOB="01"], 0x33a0}}, 0x0) 12:34:25 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 941.644280][T30464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 941.682736][T30464] rtc_cmos 00:00: Alarms can be up to one day in the future 12:34:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @private, 0x0, 0x0, 'wlan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team_slave_0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x4008003, 0x32fe3cf1}, 0x14) sendfile(r1, r0, 0x0, 0x4000000000edb8) 12:34:25 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 12:34:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 12:34:25 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) 12:34:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 12:34:25 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x153100, 0x0) 12:34:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x89}]}) 12:34:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x22c}}, 0x0) 12:34:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="a6", 0x1}], 0x1, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0) 12:34:25 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4083, 0x0) 12:34:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'veth0_to_bridge\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 12:34:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xb00d, 0xa2d5) 12:34:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 12:34:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0) 12:34:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="a6", 0x1}], 0x1, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0) 12:34:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) ioctl$RTC_AIE_OFF(r0, 0x7002) 12:34:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:34:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f00000066c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f000000c780)={0x10}, 0x10) 12:34:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 12:34:25 executing program 3: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/207) 12:34:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2) 12:34:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="a6", 0x1}], 0x1, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0) 12:34:26 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x68}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x1d) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:34:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 12:34:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 12:34:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x10007fff) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) dup3(r2, r1, 0x0) poll(&(0x7f0000000100)=[{r1}, {r0}], 0x2, 0x7f18) 12:34:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) 12:34:26 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffffffff]}, 0x8}) 12:34:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="a6", 0x1}], 0x1, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0) 12:34:26 executing program 3: r0 = fork() ioprio_set$pid(0x1, r0, 0x0) 12:34:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 12:34:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000003fc0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) 12:34:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x10007fff) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) dup3(r2, r1, 0x0) poll(&(0x7f0000000100)=[{r1}, {r0}], 0x2, 0x7f18) 12:34:26 executing program 4: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r0/1000+60000}) 12:34:26 executing program 0: pipe2$9p(0x0, 0xc00) 12:34:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000200)) 12:34:26 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) 12:34:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{0x0}, {&(0x7f0000001180)=""/94, 0x5e}], 0x2, &(0x7f0000001240)=""/247, 0xf7}}], 0x1, 0x0, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:34:26 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffffffffffffce9) 12:34:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, @sco={0x1f, @fixed}, @can}) 12:34:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x10007fff) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) dup3(r2, r1, 0x0) poll(&(0x7f0000000100)=[{r1}, {r0}], 0x2, 0x7f18) 12:34:26 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 12:34:26 executing program 3: accept4(0xffffffffffffffff, 0x0, 0x0, 0x400) 12:34:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)=ANY=[], 0x10) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18) 12:34:27 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000009140)) 12:34:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_evm(r0, 0x0, &(0x7f0000000140)=@md5={0x1, "817d768625db62ecf41a05f7de578634"}, 0x11, 0x0) poll(&(0x7f0000000100)=[{}, {}, {r0, 0x2005}, {r1}], 0x51, 0x100000c3) 12:34:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x10007fff) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) dup3(r2, r1, 0x0) poll(&(0x7f0000000100)=[{r1}, {r0}], 0x2, 0x7f18) 12:34:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f00000001c0)) 12:34:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fstatfs(r0, &(0x7f0000000040)=""/45) 12:34:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$eventfd(r0, 0x0, 0x0) 12:34:27 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14}, 0x14) 12:34:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44851) 12:34:27 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x103001, 0x0) 12:34:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) 12:34:27 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv2(r0, &(0x7f0000003940)=[{&(0x7f0000002280)=""/35, 0x23}], 0x1, 0x0, 0x0, 0x0) 12:34:27 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000300)) timer_delete(0x0) 12:34:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:34:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100)) 12:34:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000408070001000600f2ff9b000780180001808018000000010000ff000000000002000000100006000465000000000c00090000000020000014aa140017007665746800008000616e1ace000080000500070088000000140004400100000000003cd957bf001b120c00000900120000007a32000000000c001b400500f77b001980000c00148008a00191edfbed879db145000806028aab8600005c1bede412d367930036453d0900020073797a30"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x8c3713, 0x0) 12:34:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)) 12:34:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000040)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 12:34:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) 12:34:27 executing program 0: r0 = fork() openat$pfkey(0xffffffffffffff9c, 0x0, 0x400241, 0x0) tkill(r0, 0xd) 12:34:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}]}, 0x58}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) 12:34:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) write$binfmt_elf64(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3a9, 0x40, 0x0, 0x401, 0x0, 0x38, 0x2}, [{0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) [ 944.589614][T30631] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:34:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000180)='W', 0x1}], 0x3}}], 0x1, 0x0) [ 944.645050][T30636] ------------[ cut here ]------------ [ 944.676092][T30636] WARNING: CPU: 0 PID: 30636 at mm/util.c:597 kvmalloc_node+0x111/0x120 [ 944.720067][T30636] Modules linked in: 12:34:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x29, 0x80000000) [ 944.743670][T30636] CPU: 0 PID: 30636 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 12:34:28 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000080)) [ 944.801605][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:34:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 944.852759][T30636] RIP: 0010:kvmalloc_node+0x111/0x120 12:34:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000001d80)=ANY=[], 0x820) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) [ 944.883638][T30636] Code: 01 00 00 00 4c 89 e7 e8 8d 18 0d 00 49 89 c5 e9 69 ff ff ff e8 10 9d d0 ff 41 89 ed 41 81 cd 00 20 01 00 eb 95 e8 ff 9c d0 ff <0f> 0b e9 4c ff ff ff 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 e8 e6 [ 944.983868][T30636] RSP: 0018:ffffc90007717248 EFLAGS: 00010216 [ 945.028481][T30636] RAX: 0000000000000461 RBX: ffffc90007717360 RCX: ffffc90012a99000 [ 945.070954][T30636] RDX: 0000000000040000 RSI: ffffffff81a57041 RDI: 0000000000000003 [ 945.099160][T30636] RBP: 0000000000400dc0 R08: 000000007fffffff R09: ffff8880b9c32a0b [ 945.127683][T30636] R10: ffffffff81a56ffe R11: 000000000000001f R12: 0000000400000018 [ 945.138542][T30636] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880397e0000 [ 945.149093][T30636] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0063) knlGS:00000000f55deb40 [ 945.159286][T30636] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 945.166849][T30636] CR2: 00007f3dccd5b018 CR3: 00000000307c0000 CR4: 00000000001506e0 [ 945.186429][T30636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 945.211365][T30636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 945.229670][T30636] Call Trace: [ 945.238217][T30636] hash_ipportip_create+0x3dd/0x1220 [ 945.245448][T30636] ? __nla_parse+0x3d/0x50 [ 945.250184][T30636] ? hash_ipportip6_list+0x12c0/0x12c0 [ 945.258271][T30636] ip_set_create+0x782/0x15a0 [ 945.263194][T30636] ? ip_set_sockfn_get+0xe60/0xe60 [ 945.270372][T30636] nfnetlink_rcv_msg+0xbc9/0x13f0 [ 945.276615][T30636] ? nfnetlink_net_init+0x380/0x380 [ 945.282932][T30636] ? rcu_read_lock_sched_held+0x3a/0x70 [ 945.290251][T30636] ? find_held_lock+0x2d/0x110 [ 945.298161][T30636] ? __dev_queue_xmit+0x1b8e/0x3710 [ 945.303650][T30636] ? lock_downgrade+0x6e0/0x6e0 [ 945.310314][T30636] ? __local_bh_enable_ip+0xa0/0x120 [ 945.317055][T30636] ? lockdep_hardirqs_on+0x79/0x100 [ 945.322721][T30636] ? __dev_queue_xmit+0x1b8e/0x3710 [ 945.330874][T30636] ? __local_bh_enable_ip+0xa0/0x120 [ 945.339240][T30636] ? __dev_queue_xmit+0xa5f/0x3710 [ 945.346237][T30636] netlink_rcv_skb+0x153/0x420 [ 945.351298][T30636] ? nfnetlink_net_init+0x380/0x380 [ 945.358355][T30636] ? netlink_ack+0xa60/0xa60 [ 945.363214][T30636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 945.378732][T30636] ? ns_capable+0xd9/0x100 [ 945.393625][T30662] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 945.402040][T30636] nfnetlink_rcv+0x1ac/0x420 [ 945.410825][T30636] ? nfnetlink_rcv_batch+0x25f0/0x25f0 [ 945.417995][T30636] ? netlink_deliver_tap+0x1b1/0xc30 [ 945.423521][T30636] netlink_unicast+0x533/0x7d0 [ 945.430045][T30636] ? netlink_attachskb+0x890/0x890 [ 945.436308][T30636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 945.443336][T30636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 945.451324][T30636] ? __phys_addr_symbol+0x2c/0x70 [ 945.457668][T30636] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 945.469025][T30636] ? __check_object_size+0x16e/0x3f0 [ 945.476362][T30636] netlink_sendmsg+0x86d/0xdb0 [ 945.481343][T30636] ? netlink_unicast+0x7d0/0x7d0 [ 945.491149][T30636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 945.510938][T30636] ? netlink_unicast+0x7d0/0x7d0 [ 945.524563][T30636] sock_sendmsg+0xcf/0x120 [ 945.531989][T30636] ____sys_sendmsg+0x6e8/0x810 [ 945.544107][T30636] ? kernel_sendmsg+0x50/0x50 [ 945.548993][T30636] ? do_recvmmsg+0x6e0/0x6e0 [ 945.562251][T30636] ? futex_wait_restart+0x200/0x200 [ 945.570169][T30636] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 945.579850][T30636] ? lock_chain_count+0x20/0x20 [ 945.587701][T30636] ___sys_sendmsg+0xf3/0x170 [ 945.592536][T30636] ? sendmsg_copy_msghdr+0x160/0x160 [ 945.599684][T30636] ? __fget_files+0x21b/0x3e0 [ 945.606525][T30636] ? lock_downgrade+0x6e0/0x6e0 [ 945.611622][T30636] ? __lock_acquire+0x162f/0x54a0 [ 945.618695][T30636] ? __fget_files+0x23d/0x3e0 [ 945.623575][T30636] ? __fget_light+0xea/0x280 [ 945.631444][T30636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 945.645750][T30636] __sys_sendmsg+0xf3/0x1c0 [ 945.650459][T30636] ? __sys_sendmsg_sock+0x30/0x30 [ 945.671407][T30636] ? __context_tracking_exit+0xb8/0xe0 [ 945.678758][T30636] ? lock_downgrade+0x6e0/0x6e0 [ 945.684655][T30636] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 945.692953][T30636] __do_fast_syscall_32+0x65/0xf0 [ 945.699836][T30636] do_fast_syscall_32+0x2f/0x70 [ 945.705575][T30636] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.712117][T30636] RIP: 0023:0xf7fe4549 [ 945.718438][T30636] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 945.741177][T30636] RSP: 002b:00000000f55de5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 945.750528][T30636] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 945.759619][T30636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.768388][T30636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.777405][T30636] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 945.786352][T30636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.796787][T30636] Kernel panic - not syncing: panic_on_warn set ... [ 945.803382][T30636] CPU: 1 PID: 30636 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 945.811781][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.822003][T30636] Call Trace: [ 945.825278][T30636] dump_stack_lvl+0xcd/0x134 [ 945.829946][T30636] panic+0x2b0/0x6dd [ 945.833868][T30636] ? __warn_printk+0xf3/0xf3 [ 945.838509][T30636] ? __warn.cold+0x1a/0x44 [ 945.842946][T30636] ? kvmalloc_node+0x111/0x120 [ 945.847719][T30636] __warn.cold+0x35/0x44 [ 945.851974][T30636] ? kvmalloc_node+0x111/0x120 [ 945.856751][T30636] report_bug+0x1bd/0x210 [ 945.861169][T30636] handle_bug+0x3c/0x60 [ 945.865334][T30636] exc_invalid_op+0x14/0x40 [ 945.869862][T30636] asm_exc_invalid_op+0x12/0x20 [ 945.874725][T30636] RIP: 0010:kvmalloc_node+0x111/0x120 [ 945.880119][T30636] Code: 01 00 00 00 4c 89 e7 e8 8d 18 0d 00 49 89 c5 e9 69 ff ff ff e8 10 9d d0 ff 41 89 ed 41 81 cd 00 20 01 00 eb 95 e8 ff 9c d0 ff <0f> 0b e9 4c ff ff ff 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 e8 e6 [ 945.899744][T30636] RSP: 0018:ffffc90007717248 EFLAGS: 00010216 [ 945.905817][T30636] RAX: 0000000000000461 RBX: ffffc90007717360 RCX: ffffc90012a99000 [ 945.913786][T30636] RDX: 0000000000040000 RSI: ffffffff81a57041 RDI: 0000000000000003 [ 945.921935][T30636] RBP: 0000000000400dc0 R08: 000000007fffffff R09: ffff8880b9c32a0b [ 945.929902][T30636] R10: ffffffff81a56ffe R11: 000000000000001f R12: 0000000400000018 [ 945.937872][T30636] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880397e0000 [ 945.945845][T30636] ? kvmalloc_node+0xce/0x120 [ 945.950532][T30636] ? kvmalloc_node+0x111/0x120 [ 945.955299][T30636] ? kvmalloc_node+0x111/0x120 [ 945.960069][T30636] hash_ipportip_create+0x3dd/0x1220 [ 945.965362][T30636] ? __nla_parse+0x3d/0x50 [ 945.969782][T30636] ? hash_ipportip6_list+0x12c0/0x12c0 [ 945.975243][T30636] ip_set_create+0x782/0x15a0 [ 945.979938][T30636] ? ip_set_sockfn_get+0xe60/0xe60 [ 945.985078][T30636] nfnetlink_rcv_msg+0xbc9/0x13f0 [ 945.990119][T30636] ? nfnetlink_net_init+0x380/0x380 [ 945.995334][T30636] ? rcu_read_lock_sched_held+0x3a/0x70 [ 946.000901][T30636] ? find_held_lock+0x2d/0x110 [ 946.005863][T30636] ? __dev_queue_xmit+0x1b8e/0x3710 [ 946.011712][T30636] ? lock_downgrade+0x6e0/0x6e0 [ 946.016586][T30636] ? __local_bh_enable_ip+0xa0/0x120 [ 946.021879][T30636] ? lockdep_hardirqs_on+0x79/0x100 [ 946.027080][T30636] ? __dev_queue_xmit+0x1b8e/0x3710 [ 946.032277][T30636] ? __local_bh_enable_ip+0xa0/0x120 [ 946.037565][T30636] ? __dev_queue_xmit+0xa5f/0x3710 [ 946.042678][T30636] netlink_rcv_skb+0x153/0x420 [ 946.047444][T30636] ? nfnetlink_net_init+0x380/0x380 [ 946.052650][T30636] ? netlink_ack+0xa60/0xa60 [ 946.057248][T30636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 946.063488][T30636] ? ns_capable+0xd9/0x100 [ 946.068089][T30636] nfnetlink_rcv+0x1ac/0x420 [ 946.072681][T30636] ? nfnetlink_rcv_batch+0x25f0/0x25f0 [ 946.078138][T30636] ? netlink_deliver_tap+0x1b1/0xc30 [ 946.083429][T30636] netlink_unicast+0x533/0x7d0 [ 946.088194][T30636] ? netlink_attachskb+0x890/0x890 [ 946.093298][T30636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 946.099541][T30636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 946.105796][T30636] ? __phys_addr_symbol+0x2c/0x70 [ 946.110837][T30636] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 946.116572][T30636] ? __check_object_size+0x16e/0x3f0 [ 946.121881][T30636] netlink_sendmsg+0x86d/0xdb0 [ 946.126658][T30636] ? netlink_unicast+0x7d0/0x7d0 [ 946.131603][T30636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 946.137849][T30636] ? netlink_unicast+0x7d0/0x7d0 [ 946.142876][T30636] sock_sendmsg+0xcf/0x120 [ 946.147293][T30636] ____sys_sendmsg+0x6e8/0x810 [ 946.152060][T30636] ? kernel_sendmsg+0x50/0x50 [ 946.156734][T30636] ? do_recvmmsg+0x6e0/0x6e0 [ 946.161326][T30636] ? futex_wait_restart+0x200/0x200 [ 946.166543][T30636] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 946.172521][T30636] ? lock_chain_count+0x20/0x20 [ 946.177381][T30636] ___sys_sendmsg+0xf3/0x170 [ 946.181975][T30636] ? sendmsg_copy_msghdr+0x160/0x160 [ 946.187269][T30636] ? __fget_files+0x21b/0x3e0 [ 946.191946][T30636] ? lock_downgrade+0x6e0/0x6e0 [ 946.196796][T30636] ? __lock_acquire+0x162f/0x54a0 [ 946.201832][T30636] ? __fget_files+0x23d/0x3e0 [ 946.206523][T30636] ? __fget_light+0xea/0x280 [ 946.211110][T30636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 946.217354][T30636] __sys_sendmsg+0xf3/0x1c0 [ 946.221866][T30636] ? __sys_sendmsg_sock+0x30/0x30 [ 946.226979][T30636] ? __context_tracking_exit+0xb8/0xe0 [ 946.232440][T30636] ? lock_downgrade+0x6e0/0x6e0 [ 946.237305][T30636] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 946.243899][T30636] __do_fast_syscall_32+0x65/0xf0 [ 946.248926][T30636] do_fast_syscall_32+0x2f/0x70 [ 946.253782][T30636] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.260111][T30636] RIP: 0023:0xf7fe4549 [ 946.264178][T30636] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 946.283791][T30636] RSP: 002b:00000000f55de5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 946.292224][T30636] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 946.300200][T30636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 946.308169][T30636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.316139][T30636] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 946.324108][T30636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 946.332524][T30636] Kernel Offset: disabled [ 946.337025][T30636] Rebooting in 86400 seconds..