Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. 2021/03/01 22:31:28 fuzzer started 2021/03/01 22:31:28 dialing manager at 10.128.0.169:33323 2021/03/01 22:31:28 syscalls: 3541 2021/03/01 22:31:28 code coverage: enabled 2021/03/01 22:31:28 comparison tracing: enabled 2021/03/01 22:31:28 extra coverage: enabled 2021/03/01 22:31:28 setuid sandbox: enabled 2021/03/01 22:31:28 namespace sandbox: enabled 2021/03/01 22:31:28 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/01 22:31:28 fault injection: enabled 2021/03/01 22:31:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/01 22:31:28 net packet injection: enabled 2021/03/01 22:31:28 net device setup: enabled 2021/03/01 22:31:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/01 22:31:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/01 22:31:28 USB emulation: enabled 2021/03/01 22:31:28 hci packet injection: enabled 2021/03/01 22:31:28 wifi device emulation: enabled 2021/03/01 22:31:28 802.15.4 emulation: enabled 2021/03/01 22:31:28 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/01 22:31:29 fetching corpus: 50, signal 50385/54157 (executing program) 2021/03/01 22:31:29 fetching corpus: 100, signal 79654/85150 (executing program) 2021/03/01 22:31:29 fetching corpus: 150, signal 98933/106115 (executing program) 2021/03/01 22:31:29 fetching corpus: 200, signal 118509/127306 (executing program) 2021/03/01 22:31:29 fetching corpus: 250, signal 131038/141436 (executing program) [ 71.063507][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.070094][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/01 22:31:29 fetching corpus: 300, signal 142829/154829 (executing program) 2021/03/01 22:31:29 fetching corpus: 350, signal 155557/169042 (executing program) 2021/03/01 22:31:29 fetching corpus: 400, signal 164840/179828 (executing program) 2021/03/01 22:31:30 fetching corpus: 450, signal 178451/194854 (executing program) 2021/03/01 22:31:30 fetching corpus: 500, signal 188840/206618 (executing program) 2021/03/01 22:31:30 fetching corpus: 550, signal 200130/219203 (executing program) 2021/03/01 22:31:30 fetching corpus: 600, signal 206502/227009 (executing program) 2021/03/01 22:31:30 fetching corpus: 650, signal 217733/239518 (executing program) 2021/03/01 22:31:30 fetching corpus: 700, signal 223078/246247 (executing program) 2021/03/01 22:31:30 fetching corpus: 750, signal 235095/259444 (executing program) 2021/03/01 22:31:30 fetching corpus: 800, signal 240412/266114 (executing program) 2021/03/01 22:31:31 fetching corpus: 850, signal 243392/270503 (executing program) 2021/03/01 22:31:31 fetching corpus: 900, signal 249416/277844 (executing program) 2021/03/01 22:31:31 fetching corpus: 950, signal 256291/285894 (executing program) 2021/03/01 22:31:31 fetching corpus: 1000, signal 264405/295121 (executing program) 2021/03/01 22:31:31 fetching corpus: 1050, signal 269154/301161 (executing program) 2021/03/01 22:31:31 fetching corpus: 1100, signal 273767/307058 (executing program) 2021/03/01 22:31:31 fetching corpus: 1150, signal 283594/317838 (executing program) 2021/03/01 22:31:31 fetching corpus: 1200, signal 290519/325846 (executing program) 2021/03/01 22:31:32 fetching corpus: 1250, signal 295618/332091 (executing program) 2021/03/01 22:31:32 fetching corpus: 1300, signal 301348/338940 (executing program) 2021/03/01 22:31:32 fetching corpus: 1350, signal 306306/345025 (executing program) 2021/03/01 22:31:32 fetching corpus: 1400, signal 312849/352592 (executing program) 2021/03/01 22:31:32 fetching corpus: 1450, signal 316757/357662 (executing program) 2021/03/01 22:31:32 fetching corpus: 1500, signal 323636/365499 (executing program) 2021/03/01 22:31:32 fetching corpus: 1550, signal 330216/373001 (executing program) 2021/03/01 22:31:32 fetching corpus: 1600, signal 337220/380873 (executing program) 2021/03/01 22:31:32 fetching corpus: 1649, signal 340150/384954 (executing program) 2021/03/01 22:31:33 fetching corpus: 1699, signal 346304/391963 (executing program) 2021/03/01 22:31:33 fetching corpus: 1749, signal 351595/398197 (executing program) 2021/03/01 22:31:33 fetching corpus: 1799, signal 356365/403877 (executing program) 2021/03/01 22:31:33 fetching corpus: 1849, signal 358496/407099 (executing program) 2021/03/01 22:31:33 fetching corpus: 1899, signal 360947/410681 (executing program) 2021/03/01 22:31:33 fetching corpus: 1949, signal 365678/416310 (executing program) 2021/03/01 22:31:33 fetching corpus: 1999, signal 370643/422132 (executing program) 2021/03/01 22:31:33 fetching corpus: 2049, signal 373313/425870 (executing program) 2021/03/01 22:31:33 fetching corpus: 2099, signal 379890/433148 (executing program) 2021/03/01 22:31:34 fetching corpus: 2149, signal 385785/439809 (executing program) 2021/03/01 22:31:34 fetching corpus: 2199, signal 389287/444227 (executing program) 2021/03/01 22:31:34 fetching corpus: 2249, signal 393065/448828 (executing program) 2021/03/01 22:31:34 fetching corpus: 2299, signal 396625/453303 (executing program) 2021/03/01 22:31:34 fetching corpus: 2349, signal 398979/456625 (executing program) 2021/03/01 22:31:34 fetching corpus: 2399, signal 402560/461086 (executing program) 2021/03/01 22:31:34 fetching corpus: 2449, signal 409859/468852 (executing program) 2021/03/01 22:31:35 fetching corpus: 2499, signal 412010/471962 (executing program) 2021/03/01 22:31:35 fetching corpus: 2549, signal 414831/475675 (executing program) 2021/03/01 22:31:35 fetching corpus: 2598, signal 417827/479524 (executing program) 2021/03/01 22:31:35 fetching corpus: 2648, signal 421656/484140 (executing program) 2021/03/01 22:31:35 fetching corpus: 2698, signal 423923/487280 (executing program) 2021/03/01 22:31:35 fetching corpus: 2748, signal 427294/491407 (executing program) 2021/03/01 22:31:35 fetching corpus: 2798, signal 430123/495039 (executing program) 2021/03/01 22:31:35 fetching corpus: 2848, signal 433111/498827 (executing program) 2021/03/01 22:31:36 fetching corpus: 2898, signal 437778/504072 (executing program) 2021/03/01 22:31:36 fetching corpus: 2948, signal 439490/506670 (executing program) 2021/03/01 22:31:36 fetching corpus: 2998, signal 443086/510944 (executing program) 2021/03/01 22:31:36 fetching corpus: 3048, signal 445263/513940 (executing program) 2021/03/01 22:31:36 fetching corpus: 3098, signal 447566/517115 (executing program) 2021/03/01 22:31:36 fetching corpus: 3148, signal 453846/523673 (executing program) 2021/03/01 22:31:36 fetching corpus: 3198, signal 456509/527091 (executing program) 2021/03/01 22:31:36 fetching corpus: 3248, signal 458342/529791 (executing program) 2021/03/01 22:31:37 fetching corpus: 3298, signal 462316/534286 (executing program) 2021/03/01 22:31:37 fetching corpus: 3348, signal 464779/537516 (executing program) 2021/03/01 22:31:37 fetching corpus: 3398, signal 467663/541057 (executing program) 2021/03/01 22:31:37 fetching corpus: 3448, signal 471644/545515 (executing program) 2021/03/01 22:31:37 fetching corpus: 3498, signal 474246/548828 (executing program) 2021/03/01 22:31:37 fetching corpus: 3548, signal 476146/551495 (executing program) 2021/03/01 22:31:37 fetching corpus: 3598, signal 478368/554382 (executing program) 2021/03/01 22:31:37 fetching corpus: 3648, signal 482298/558758 (executing program) 2021/03/01 22:31:38 fetching corpus: 3698, signal 486684/563501 (executing program) 2021/03/01 22:31:38 fetching corpus: 3748, signal 488544/566104 (executing program) 2021/03/01 22:31:38 fetching corpus: 3798, signal 491125/569340 (executing program) 2021/03/01 22:31:38 fetching corpus: 3848, signal 492676/571710 (executing program) 2021/03/01 22:31:38 fetching corpus: 3898, signal 495051/574733 (executing program) 2021/03/01 22:31:38 fetching corpus: 3948, signal 496609/577002 (executing program) 2021/03/01 22:31:38 fetching corpus: 3998, signal 498605/579633 (executing program) 2021/03/01 22:31:38 fetching corpus: 4048, signal 501093/582760 (executing program) 2021/03/01 22:31:38 fetching corpus: 4098, signal 502805/585157 (executing program) 2021/03/01 22:31:38 fetching corpus: 4148, signal 505091/588036 (executing program) 2021/03/01 22:31:39 fetching corpus: 4198, signal 507167/590678 (executing program) 2021/03/01 22:31:39 fetching corpus: 4248, signal 509538/593604 (executing program) 2021/03/01 22:31:39 fetching corpus: 4298, signal 511288/596017 (executing program) 2021/03/01 22:31:39 fetching corpus: 4348, signal 514012/599205 (executing program) 2021/03/01 22:31:39 fetching corpus: 4398, signal 516856/602489 (executing program) 2021/03/01 22:31:39 fetching corpus: 4448, signal 518667/604898 (executing program) 2021/03/01 22:31:39 fetching corpus: 4498, signal 520512/607367 (executing program) 2021/03/01 22:31:39 fetching corpus: 4548, signal 522920/610255 (executing program) 2021/03/01 22:31:39 fetching corpus: 4598, signal 524996/612907 (executing program) 2021/03/01 22:31:40 fetching corpus: 4648, signal 527435/615833 (executing program) 2021/03/01 22:31:40 fetching corpus: 4698, signal 529289/618300 (executing program) 2021/03/01 22:31:40 fetching corpus: 4748, signal 531429/620975 (executing program) 2021/03/01 22:31:40 fetching corpus: 4798, signal 535410/625099 (executing program) 2021/03/01 22:31:40 fetching corpus: 4848, signal 538713/628659 (executing program) 2021/03/01 22:31:40 fetching corpus: 4898, signal 540831/631323 (executing program) 2021/03/01 22:31:40 fetching corpus: 4948, signal 543237/634129 (executing program) 2021/03/01 22:31:40 fetching corpus: 4998, signal 545215/636658 (executing program) 2021/03/01 22:31:40 fetching corpus: 5048, signal 546966/638983 (executing program) 2021/03/01 22:31:41 fetching corpus: 5098, signal 548508/641106 (executing program) 2021/03/01 22:31:41 fetching corpus: 5148, signal 549842/643037 (executing program) 2021/03/01 22:31:41 fetching corpus: 5198, signal 552147/645781 (executing program) 2021/03/01 22:31:41 fetching corpus: 5248, signal 554365/648441 (executing program) 2021/03/01 22:31:41 fetching corpus: 5298, signal 556355/650919 (executing program) 2021/03/01 22:31:41 fetching corpus: 5348, signal 557997/653090 (executing program) 2021/03/01 22:31:41 fetching corpus: 5398, signal 559790/655349 (executing program) 2021/03/01 22:31:41 fetching corpus: 5448, signal 561063/657228 (executing program) 2021/03/01 22:31:42 fetching corpus: 5498, signal 563292/659813 (executing program) 2021/03/01 22:31:42 fetching corpus: 5548, signal 564464/661589 (executing program) 2021/03/01 22:31:42 fetching corpus: 5598, signal 566539/664027 (executing program) 2021/03/01 22:31:42 fetching corpus: 5648, signal 567830/665902 (executing program) 2021/03/01 22:31:42 fetching corpus: 5698, signal 570106/668540 (executing program) 2021/03/01 22:31:42 fetching corpus: 5748, signal 571815/670719 (executing program) 2021/03/01 22:31:42 fetching corpus: 5798, signal 573692/672969 (executing program) 2021/03/01 22:31:42 fetching corpus: 5848, signal 575484/675204 (executing program) 2021/03/01 22:31:42 fetching corpus: 5898, signal 577452/677522 (executing program) 2021/03/01 22:31:43 fetching corpus: 5948, signal 580276/680555 (executing program) 2021/03/01 22:31:43 fetching corpus: 5998, signal 582346/682973 (executing program) 2021/03/01 22:31:43 fetching corpus: 6048, signal 584284/685295 (executing program) 2021/03/01 22:31:43 fetching corpus: 6098, signal 586448/687795 (executing program) 2021/03/01 22:31:43 fetching corpus: 6148, signal 587852/689665 (executing program) 2021/03/01 22:31:43 fetching corpus: 6198, signal 590315/692285 (executing program) 2021/03/01 22:31:43 fetching corpus: 6248, signal 592772/694937 (executing program) 2021/03/01 22:31:43 fetching corpus: 6298, signal 594299/696924 (executing program) 2021/03/01 22:31:43 fetching corpus: 6348, signal 595307/698436 (executing program) 2021/03/01 22:31:44 fetching corpus: 6398, signal 597079/700557 (executing program) 2021/03/01 22:31:44 fetching corpus: 6448, signal 598430/702349 (executing program) 2021/03/01 22:31:44 fetching corpus: 6498, signal 600074/704335 (executing program) 2021/03/01 22:31:44 fetching corpus: 6548, signal 601597/706246 (executing program) 2021/03/01 22:31:44 fetching corpus: 6598, signal 603205/708258 (executing program) 2021/03/01 22:31:44 fetching corpus: 6648, signal 604696/710153 (executing program) 2021/03/01 22:31:44 fetching corpus: 6698, signal 605997/711860 (executing program) 2021/03/01 22:31:44 fetching corpus: 6748, signal 607897/713988 (executing program) 2021/03/01 22:31:45 fetching corpus: 6798, signal 609741/716091 (executing program) 2021/03/01 22:31:45 fetching corpus: 6848, signal 611270/717948 (executing program) 2021/03/01 22:31:45 fetching corpus: 6898, signal 612247/719443 (executing program) 2021/03/01 22:31:45 fetching corpus: 6948, signal 613317/720942 (executing program) 2021/03/01 22:31:45 fetching corpus: 6998, signal 614238/722368 (executing program) 2021/03/01 22:31:45 fetching corpus: 7048, signal 615817/724278 (executing program) 2021/03/01 22:31:45 fetching corpus: 7098, signal 617090/725960 (executing program) 2021/03/01 22:31:45 fetching corpus: 7148, signal 618353/727633 (executing program) 2021/03/01 22:31:45 fetching corpus: 7198, signal 619969/729540 (executing program) 2021/03/01 22:31:46 fetching corpus: 7248, signal 620925/730945 (executing program) 2021/03/01 22:31:46 fetching corpus: 7298, signal 622378/732736 (executing program) 2021/03/01 22:31:46 fetching corpus: 7348, signal 623252/734092 (executing program) 2021/03/01 22:31:46 fetching corpus: 7398, signal 624672/735805 (executing program) 2021/03/01 22:31:46 fetching corpus: 7448, signal 625641/737218 (executing program) 2021/03/01 22:31:46 fetching corpus: 7498, signal 627435/739204 (executing program) 2021/03/01 22:31:46 fetching corpus: 7548, signal 628827/740911 (executing program) 2021/03/01 22:31:46 fetching corpus: 7598, signal 630095/742475 (executing program) 2021/03/01 22:31:46 fetching corpus: 7648, signal 631512/744138 (executing program) 2021/03/01 22:31:47 fetching corpus: 7698, signal 632956/745893 (executing program) 2021/03/01 22:31:47 fetching corpus: 7748, signal 633887/747235 (executing program) 2021/03/01 22:31:47 fetching corpus: 7798, signal 635812/749254 (executing program) 2021/03/01 22:31:47 fetching corpus: 7848, signal 636768/750620 (executing program) 2021/03/01 22:31:47 fetching corpus: 7898, signal 638004/752191 (executing program) 2021/03/01 22:31:47 fetching corpus: 7948, signal 639555/753950 (executing program) 2021/03/01 22:31:47 fetching corpus: 7998, signal 640292/755227 (executing program) 2021/03/01 22:31:47 fetching corpus: 8048, signal 641390/756664 (executing program) 2021/03/01 22:31:47 fetching corpus: 8098, signal 642940/758388 (executing program) 2021/03/01 22:31:47 fetching corpus: 8148, signal 644228/759967 (executing program) 2021/03/01 22:31:48 fetching corpus: 8198, signal 645609/761599 (executing program) 2021/03/01 22:31:48 fetching corpus: 8248, signal 646307/762793 (executing program) 2021/03/01 22:31:48 fetching corpus: 8298, signal 647701/764396 (executing program) 2021/03/01 22:31:48 fetching corpus: 8348, signal 648597/765627 (executing program) 2021/03/01 22:31:48 fetching corpus: 8398, signal 649555/766946 (executing program) 2021/03/01 22:31:48 fetching corpus: 8448, signal 650348/768156 (executing program) 2021/03/01 22:31:48 fetching corpus: 8498, signal 652401/770209 (executing program) 2021/03/01 22:31:48 fetching corpus: 8548, signal 653270/771426 (executing program) 2021/03/01 22:31:49 fetching corpus: 8598, signal 655083/773280 (executing program) 2021/03/01 22:31:49 fetching corpus: 8648, signal 656022/774580 (executing program) 2021/03/01 22:31:49 fetching corpus: 8698, signal 657810/776427 (executing program) 2021/03/01 22:31:49 fetching corpus: 8748, signal 659020/777915 (executing program) 2021/03/01 22:31:49 fetching corpus: 8798, signal 660129/779307 (executing program) 2021/03/01 22:31:49 fetching corpus: 8848, signal 661889/781113 (executing program) 2021/03/01 22:31:49 fetching corpus: 8898, signal 662995/782569 (executing program) 2021/03/01 22:31:49 fetching corpus: 8948, signal 663966/783837 (executing program) 2021/03/01 22:31:50 fetching corpus: 8998, signal 665059/785189 (executing program) 2021/03/01 22:31:50 fetching corpus: 9048, signal 666688/786885 (executing program) 2021/03/01 22:31:50 fetching corpus: 9098, signal 667813/788235 (executing program) 2021/03/01 22:31:50 fetching corpus: 9148, signal 669006/789643 (executing program) 2021/03/01 22:31:50 fetching corpus: 9198, signal 670780/791407 (executing program) 2021/03/01 22:31:50 fetching corpus: 9248, signal 671952/792747 (executing program) 2021/03/01 22:31:50 fetching corpus: 9298, signal 672720/793842 (executing program) 2021/03/01 22:31:50 fetching corpus: 9348, signal 673741/795093 (executing program) 2021/03/01 22:31:51 fetching corpus: 9398, signal 674789/796380 (executing program) 2021/03/01 22:31:51 fetching corpus: 9448, signal 675699/797595 (executing program) 2021/03/01 22:31:51 fetching corpus: 9498, signal 676787/798927 (executing program) 2021/03/01 22:31:51 fetching corpus: 9548, signal 679519/801177 (executing program) 2021/03/01 22:31:51 fetching corpus: 9598, signal 680577/802442 (executing program) 2021/03/01 22:31:51 fetching corpus: 9648, signal 681509/803616 (executing program) 2021/03/01 22:31:51 fetching corpus: 9698, signal 682819/805033 (executing program) 2021/03/01 22:31:52 fetching corpus: 9748, signal 684518/806668 (executing program) 2021/03/01 22:31:52 fetching corpus: 9798, signal 685802/808073 (executing program) 2021/03/01 22:31:52 fetching corpus: 9848, signal 686527/809125 (executing program) 2021/03/01 22:31:52 fetching corpus: 9898, signal 687452/810255 (executing program) 2021/03/01 22:31:52 fetching corpus: 9948, signal 688800/811690 (executing program) 2021/03/01 22:31:52 fetching corpus: 9998, signal 690197/813181 (executing program) 2021/03/01 22:31:52 fetching corpus: 10048, signal 691667/814697 (executing program) 2021/03/01 22:31:52 fetching corpus: 10098, signal 692783/815946 (executing program) 2021/03/01 22:31:52 fetching corpus: 10148, signal 698105/819686 (executing program) 2021/03/01 22:31:53 fetching corpus: 10198, signal 698934/820773 (executing program) 2021/03/01 22:31:53 fetching corpus: 10248, signal 700123/822042 (executing program) 2021/03/01 22:31:53 fetching corpus: 10298, signal 701170/823225 (executing program) 2021/03/01 22:31:53 fetching corpus: 10348, signal 702401/824537 (executing program) 2021/03/01 22:31:53 fetching corpus: 10398, signal 703397/825713 (executing program) 2021/03/01 22:31:53 fetching corpus: 10448, signal 704805/827100 (executing program) 2021/03/01 22:31:53 fetching corpus: 10498, signal 706381/828599 (executing program) 2021/03/01 22:31:53 fetching corpus: 10548, signal 708091/830214 (executing program) 2021/03/01 22:31:53 fetching corpus: 10598, signal 708894/831199 (executing program) 2021/03/01 22:31:54 fetching corpus: 10648, signal 710412/832693 (executing program) 2021/03/01 22:31:54 fetching corpus: 10698, signal 711379/833816 (executing program) 2021/03/01 22:31:54 fetching corpus: 10748, signal 712628/835086 (executing program) 2021/03/01 22:31:54 fetching corpus: 10798, signal 713496/836132 (executing program) 2021/03/01 22:31:54 fetching corpus: 10848, signal 715112/837643 (executing program) 2021/03/01 22:31:54 fetching corpus: 10898, signal 716130/838787 (executing program) 2021/03/01 22:31:54 fetching corpus: 10948, signal 717009/839853 (executing program) 2021/03/01 22:31:54 fetching corpus: 10998, signal 718033/840970 (executing program) 2021/03/01 22:31:55 fetching corpus: 11048, signal 718766/841927 (executing program) 2021/03/01 22:31:55 fetching corpus: 11098, signal 719591/842919 (executing program) 2021/03/01 22:31:55 fetching corpus: 11148, signal 720458/843947 (executing program) 2021/03/01 22:31:55 fetching corpus: 11198, signal 720998/844796 (executing program) 2021/03/01 22:31:55 fetching corpus: 11248, signal 722082/845957 (executing program) 2021/03/01 22:31:55 fetching corpus: 11298, signal 723025/847019 (executing program) 2021/03/01 22:31:55 fetching corpus: 11348, signal 724146/848150 (executing program) 2021/03/01 22:31:56 fetching corpus: 11398, signal 724761/848996 (executing program) 2021/03/01 22:31:56 fetching corpus: 11448, signal 725608/850004 (executing program) 2021/03/01 22:31:56 fetching corpus: 11498, signal 727019/851304 (executing program) 2021/03/01 22:31:56 fetching corpus: 11548, signal 727711/852219 (executing program) 2021/03/01 22:31:56 fetching corpus: 11598, signal 728475/853194 (executing program) 2021/03/01 22:31:56 fetching corpus: 11648, signal 728981/854005 (executing program) 2021/03/01 22:31:56 fetching corpus: 11698, signal 729703/854922 (executing program) 2021/03/01 22:31:56 fetching corpus: 11748, signal 730452/855858 (executing program) 2021/03/01 22:31:56 fetching corpus: 11798, signal 731196/856789 (executing program) 2021/03/01 22:31:57 fetching corpus: 11848, signal 731978/857736 (executing program) 2021/03/01 22:31:57 fetching corpus: 11898, signal 733522/859052 (executing program) 2021/03/01 22:31:57 fetching corpus: 11948, signal 734188/859932 (executing program) 2021/03/01 22:31:57 fetching corpus: 11998, signal 735385/861035 (executing program) 2021/03/01 22:31:57 fetching corpus: 12048, signal 736499/862144 (executing program) 2021/03/01 22:31:57 fetching corpus: 12098, signal 737318/863112 (executing program) 2021/03/01 22:31:57 fetching corpus: 12148, signal 738002/863977 (executing program) 2021/03/01 22:31:57 fetching corpus: 12198, signal 738829/864921 (executing program) 2021/03/01 22:31:58 fetching corpus: 12248, signal 739723/865885 (executing program) 2021/03/01 22:31:58 fetching corpus: 12298, signal 740386/866689 (executing program) 2021/03/01 22:31:58 fetching corpus: 12348, signal 740995/867483 (executing program) 2021/03/01 22:31:58 fetching corpus: 12398, signal 741812/868405 (executing program) 2021/03/01 22:31:58 fetching corpus: 12448, signal 742396/869249 (executing program) 2021/03/01 22:31:58 fetching corpus: 12498, signal 743908/870497 (executing program) 2021/03/01 22:31:58 fetching corpus: 12548, signal 745570/871806 (executing program) 2021/03/01 22:31:58 fetching corpus: 12598, signal 746295/872636 (executing program) 2021/03/01 22:31:58 fetching corpus: 12648, signal 747441/873719 (executing program) 2021/03/01 22:31:59 fetching corpus: 12698, signal 748532/874759 (executing program) 2021/03/01 22:31:59 fetching corpus: 12748, signal 749458/875704 (executing program) 2021/03/01 22:31:59 fetching corpus: 12798, signal 750138/876520 (executing program) 2021/03/01 22:31:59 fetching corpus: 12848, signal 750951/877413 (executing program) 2021/03/01 22:31:59 fetching corpus: 12898, signal 752000/878423 (executing program) 2021/03/01 22:31:59 fetching corpus: 12948, signal 752776/879285 (executing program) 2021/03/01 22:31:59 fetching corpus: 12998, signal 753815/880292 (executing program) 2021/03/01 22:32:00 fetching corpus: 13048, signal 754302/881003 (executing program) 2021/03/01 22:32:00 fetching corpus: 13098, signal 754741/881696 (executing program) 2021/03/01 22:32:00 fetching corpus: 13148, signal 755362/882440 (executing program) 2021/03/01 22:32:00 fetching corpus: 13198, signal 757117/883740 (executing program) 2021/03/01 22:32:00 fetching corpus: 13248, signal 757755/884494 (executing program) 2021/03/01 22:32:00 fetching corpus: 13298, signal 758536/885381 (executing program) 2021/03/01 22:32:00 fetching corpus: 13348, signal 759385/886248 (executing program) 2021/03/01 22:32:00 fetching corpus: 13398, signal 760669/887276 (executing program) 2021/03/01 22:32:01 fetching corpus: 13448, signal 761582/888166 (executing program) 2021/03/01 22:32:01 fetching corpus: 13498, signal 762857/889239 (executing program) 2021/03/01 22:32:01 fetching corpus: 13548, signal 763642/890063 (executing program) 2021/03/01 22:32:01 fetching corpus: 13598, signal 764983/891182 (executing program) 2021/03/01 22:32:01 fetching corpus: 13648, signal 766198/892193 (executing program) 2021/03/01 22:32:01 fetching corpus: 13698, signal 766982/893018 (executing program) 2021/03/01 22:32:01 fetching corpus: 13748, signal 767791/893833 (executing program) 2021/03/01 22:32:01 fetching corpus: 13798, signal 769123/894911 (executing program) 2021/03/01 22:32:02 fetching corpus: 13848, signal 769892/895695 (executing program) 2021/03/01 22:32:02 fetching corpus: 13898, signal 770947/896622 (executing program) 2021/03/01 22:32:02 fetching corpus: 13948, signal 772035/897514 (executing program) 2021/03/01 22:32:02 fetching corpus: 13998, signal 773180/898503 (executing program) 2021/03/01 22:32:02 fetching corpus: 14048, signal 773995/899297 (executing program) 2021/03/01 22:32:02 fetching corpus: 14098, signal 774716/900028 (executing program) 2021/03/01 22:32:02 fetching corpus: 14148, signal 775222/900720 (executing program) 2021/03/01 22:32:02 fetching corpus: 14198, signal 775714/901360 (executing program) 2021/03/01 22:32:03 fetching corpus: 14248, signal 776717/902246 (executing program) 2021/03/01 22:32:03 fetching corpus: 14298, signal 777638/903066 (executing program) 2021/03/01 22:32:03 fetching corpus: 14348, signal 778416/903874 (executing program) 2021/03/01 22:32:03 fetching corpus: 14398, signal 779312/904666 (executing program) 2021/03/01 22:32:03 fetching corpus: 14448, signal 780152/905418 (executing program) 2021/03/01 22:32:03 fetching corpus: 14498, signal 780806/906126 (executing program) 2021/03/01 22:32:03 fetching corpus: 14548, signal 781698/906897 (executing program) 2021/03/01 22:32:03 fetching corpus: 14598, signal 782336/907561 (executing program) 2021/03/01 22:32:04 fetching corpus: 14648, signal 783269/908341 (executing program) 2021/03/01 22:32:04 fetching corpus: 14698, signal 784561/909285 (executing program) 2021/03/01 22:32:04 fetching corpus: 14748, signal 785397/910016 (executing program) 2021/03/01 22:32:04 fetching corpus: 14798, signal 788961/911869 (executing program) 2021/03/01 22:32:04 fetching corpus: 14848, signal 789676/912591 (executing program) 2021/03/01 22:32:04 fetching corpus: 14898, signal 790381/913262 (executing program) 2021/03/01 22:32:04 fetching corpus: 14948, signal 791084/913915 (executing program) 2021/03/01 22:32:05 fetching corpus: 14998, signal 791781/914576 (executing program) 2021/03/01 22:32:05 fetching corpus: 15048, signal 792826/915434 (executing program) 2021/03/01 22:32:05 fetching corpus: 15098, signal 793937/916287 (executing program) 2021/03/01 22:32:05 fetching corpus: 15148, signal 794697/916976 (executing program) 2021/03/01 22:32:05 fetching corpus: 15198, signal 795266/917592 (executing program) 2021/03/01 22:32:05 fetching corpus: 15248, signal 795861/918244 (executing program) 2021/03/01 22:32:06 fetching corpus: 15298, signal 796618/918898 (executing program) 2021/03/01 22:32:06 fetching corpus: 15348, signal 797240/919539 (executing program) 2021/03/01 22:32:06 fetching corpus: 15398, signal 797956/920170 (executing program) 2021/03/01 22:32:06 fetching corpus: 15448, signal 798416/920737 (executing program) 2021/03/01 22:32:06 fetching corpus: 15498, signal 799271/921426 (executing program) 2021/03/01 22:32:06 fetching corpus: 15548, signal 799785/921992 (executing program) 2021/03/01 22:32:06 fetching corpus: 15598, signal 800592/922709 (executing program) 2021/03/01 22:32:06 fetching corpus: 15648, signal 801455/923414 (executing program) 2021/03/01 22:32:06 fetching corpus: 15698, signal 802191/924075 (executing program) 2021/03/01 22:32:07 fetching corpus: 15748, signal 803420/924874 (executing program) 2021/03/01 22:32:07 fetching corpus: 15798, signal 804289/925585 (executing program) 2021/03/01 22:32:07 fetching corpus: 15848, signal 804841/926188 (executing program) 2021/03/01 22:32:07 fetching corpus: 15898, signal 805348/926768 (executing program) 2021/03/01 22:32:07 fetching corpus: 15948, signal 805908/927343 (executing program) 2021/03/01 22:32:07 fetching corpus: 15998, signal 806412/927869 (executing program) 2021/03/01 22:32:07 fetching corpus: 16048, signal 807170/928521 (executing program) 2021/03/01 22:32:07 fetching corpus: 16098, signal 807787/929107 (executing program) 2021/03/01 22:32:07 fetching corpus: 16148, signal 808538/929754 (executing program) 2021/03/01 22:32:08 fetching corpus: 16198, signal 809001/930265 (executing program) 2021/03/01 22:32:08 fetching corpus: 16248, signal 809824/930917 (executing program) 2021/03/01 22:32:08 fetching corpus: 16297, signal 810279/931415 (executing program) 2021/03/01 22:32:08 fetching corpus: 16347, signal 810934/932013 (executing program) 2021/03/01 22:32:08 fetching corpus: 16397, signal 811675/932632 (executing program) 2021/03/01 22:32:08 fetching corpus: 16447, signal 812301/933228 (executing program) 2021/03/01 22:32:08 fetching corpus: 16497, signal 812960/933791 (executing program) 2021/03/01 22:32:08 fetching corpus: 16547, signal 813764/934447 (executing program) 2021/03/01 22:32:08 fetching corpus: 16597, signal 814644/935133 (executing program) 2021/03/01 22:32:09 fetching corpus: 16647, signal 815355/935729 (executing program) 2021/03/01 22:32:09 fetching corpus: 16697, signal 816007/936308 (executing program) 2021/03/01 22:32:09 fetching corpus: 16747, signal 816722/936919 (executing program) 2021/03/01 22:32:09 fetching corpus: 16797, signal 817329/937447 (executing program) 2021/03/01 22:32:09 fetching corpus: 16847, signal 817866/937942 (executing program) 2021/03/01 22:32:09 fetching corpus: 16897, signal 819301/938754 (executing program) 2021/03/01 22:32:09 fetching corpus: 16947, signal 820161/939398 (executing program) 2021/03/01 22:32:09 fetching corpus: 16997, signal 820805/939945 (executing program) 2021/03/01 22:32:09 fetching corpus: 17047, signal 821598/940502 (executing program) 2021/03/01 22:32:10 fetching corpus: 17097, signal 822516/941123 (executing program) 2021/03/01 22:32:10 fetching corpus: 17147, signal 823617/941785 (executing program) 2021/03/01 22:32:10 fetching corpus: 17197, signal 824288/942317 (executing program) 2021/03/01 22:32:10 fetching corpus: 17247, signal 825183/942915 (executing program) 2021/03/01 22:32:10 fetching corpus: 17297, signal 826436/943631 (executing program) 2021/03/01 22:32:10 fetching corpus: 17347, signal 827214/944188 (executing program) 2021/03/01 22:32:10 fetching corpus: 17397, signal 827983/944764 (executing program) 2021/03/01 22:32:10 fetching corpus: 17447, signal 828760/945340 (executing program) 2021/03/01 22:32:10 fetching corpus: 17497, signal 829211/945796 (executing program) 2021/03/01 22:32:11 fetching corpus: 17547, signal 829856/946317 (executing program) 2021/03/01 22:32:11 fetching corpus: 17597, signal 830202/946735 (executing program) 2021/03/01 22:32:11 fetching corpus: 17647, signal 830868/947298 (executing program) 2021/03/01 22:32:11 fetching corpus: 17697, signal 831461/947818 (executing program) 2021/03/01 22:32:11 fetching corpus: 17747, signal 831876/948267 (executing program) 2021/03/01 22:32:11 fetching corpus: 17797, signal 832560/948811 (executing program) 2021/03/01 22:32:11 fetching corpus: 17847, signal 833198/949289 (executing program) 2021/03/01 22:32:11 fetching corpus: 17897, signal 834009/949839 (executing program) 2021/03/01 22:32:11 fetching corpus: 17947, signal 834481/950274 (executing program) 2021/03/01 22:32:12 fetching corpus: 17997, signal 834856/950722 (executing program) 2021/03/01 22:32:12 fetching corpus: 18047, signal 835812/951309 (executing program) 2021/03/01 22:32:12 fetching corpus: 18097, signal 836484/951806 (executing program) 2021/03/01 22:32:12 fetching corpus: 18147, signal 837056/952291 (executing program) 2021/03/01 22:32:12 fetching corpus: 18197, signal 837819/952831 (executing program) 2021/03/01 22:32:12 fetching corpus: 18247, signal 838229/953256 (executing program) 2021/03/01 22:32:12 fetching corpus: 18297, signal 838986/953735 (executing program) 2021/03/01 22:32:12 fetching corpus: 18347, signal 839716/954245 (executing program) 2021/03/01 22:32:12 fetching corpus: 18397, signal 840234/954658 (executing program) 2021/03/01 22:32:13 fetching corpus: 18447, signal 840933/955153 (executing program) 2021/03/01 22:32:13 fetching corpus: 18497, signal 841388/955591 (executing program) 2021/03/01 22:32:13 fetching corpus: 18547, signal 842857/956281 (executing program) 2021/03/01 22:32:13 fetching corpus: 18597, signal 843682/956769 (executing program) 2021/03/01 22:32:13 fetching corpus: 18647, signal 844215/957180 (executing program) 2021/03/01 22:32:13 fetching corpus: 18697, signal 845381/957775 (executing program) 2021/03/01 22:32:14 fetching corpus: 18747, signal 845948/958227 (executing program) 2021/03/01 22:32:14 fetching corpus: 18797, signal 846589/958693 (executing program) 2021/03/01 22:32:14 fetching corpus: 18847, signal 847001/959077 (executing program) 2021/03/01 22:32:14 fetching corpus: 18897, signal 847531/959510 (executing program) 2021/03/01 22:32:14 fetching corpus: 18947, signal 848146/959987 (executing program) 2021/03/01 22:32:14 fetching corpus: 18996, signal 849010/960468 (executing program) 2021/03/01 22:32:14 fetching corpus: 19046, signal 849471/960862 (executing program) 2021/03/01 22:32:14 fetching corpus: 19096, signal 849997/961245 (executing program) 2021/03/01 22:32:15 fetching corpus: 19146, signal 850341/961640 (executing program) 2021/03/01 22:32:15 fetching corpus: 19196, signal 851320/962153 (executing program) 2021/03/01 22:32:15 fetching corpus: 19246, signal 851927/962611 (executing program) 2021/03/01 22:32:15 fetching corpus: 19296, signal 852289/962995 (executing program) 2021/03/01 22:32:15 fetching corpus: 19346, signal 853105/963466 (executing program) 2021/03/01 22:32:15 fetching corpus: 19396, signal 853569/963826 (executing program) 2021/03/01 22:32:15 fetching corpus: 19446, signal 854054/964219 (executing program) 2021/03/01 22:32:15 fetching corpus: 19496, signal 854641/964640 (executing program) 2021/03/01 22:32:16 fetching corpus: 19546, signal 855309/965051 (executing program) 2021/03/01 22:32:16 fetching corpus: 19596, signal 855909/965452 (executing program) 2021/03/01 22:32:16 fetching corpus: 19646, signal 856879/965933 (executing program) 2021/03/01 22:32:16 fetching corpus: 19696, signal 857332/966307 (executing program) 2021/03/01 22:32:16 fetching corpus: 19746, signal 857917/966731 (executing program) 2021/03/01 22:32:16 fetching corpus: 19796, signal 858349/967098 (executing program) 2021/03/01 22:32:16 fetching corpus: 19846, signal 858807/967472 (executing program) 2021/03/01 22:32:17 fetching corpus: 19896, signal 859186/967832 (executing program) 2021/03/01 22:32:17 fetching corpus: 19946, signal 859926/968225 (executing program) 2021/03/01 22:32:17 fetching corpus: 19996, signal 860552/968642 (executing program) 2021/03/01 22:32:17 fetching corpus: 20046, signal 860927/968963 (executing program) 2021/03/01 22:32:17 fetching corpus: 20096, signal 861257/969300 (executing program) 2021/03/01 22:32:17 fetching corpus: 20146, signal 862212/969759 (executing program) 2021/03/01 22:32:17 fetching corpus: 20196, signal 862764/970138 (executing program) 2021/03/01 22:32:18 fetching corpus: 20246, signal 863394/970520 (executing program) 2021/03/01 22:32:18 fetching corpus: 20296, signal 864095/970936 (executing program) 2021/03/01 22:32:18 fetching corpus: 20346, signal 864576/971290 (executing program) 2021/03/01 22:32:18 fetching corpus: 20396, signal 865114/971651 (executing program) 2021/03/01 22:32:18 fetching corpus: 20446, signal 865855/972070 (executing program) 2021/03/01 22:32:18 fetching corpus: 20496, signal 866783/972507 (executing program) 2021/03/01 22:32:18 fetching corpus: 20546, signal 867306/972856 (executing program) 2021/03/01 22:32:18 fetching corpus: 20596, signal 867928/973200 (executing program) 2021/03/01 22:32:19 fetching corpus: 20646, signal 868688/973580 (executing program) 2021/03/01 22:32:19 fetching corpus: 20696, signal 869104/973911 (executing program) 2021/03/01 22:32:19 fetching corpus: 20746, signal 870182/974346 (executing program) 2021/03/01 22:32:19 fetching corpus: 20796, signal 870809/974681 (executing program) 2021/03/01 22:32:19 fetching corpus: 20846, signal 871098/974967 (executing program) 2021/03/01 22:32:19 fetching corpus: 20896, signal 871616/975311 (executing program) 2021/03/01 22:32:19 fetching corpus: 20946, signal 872180/975637 (executing program) 2021/03/01 22:32:19 fetching corpus: 20996, signal 872554/975951 (executing program) 2021/03/01 22:32:20 fetching corpus: 21046, signal 872988/976252 (executing program) 2021/03/01 22:32:20 fetching corpus: 21096, signal 873509/976549 (executing program) 2021/03/01 22:32:20 fetching corpus: 21146, signal 874636/976956 (executing program) 2021/03/01 22:32:20 fetching corpus: 21196, signal 875303/977320 (executing program) 2021/03/01 22:32:20 fetching corpus: 21246, signal 876372/977749 (executing program) 2021/03/01 22:32:20 fetching corpus: 21296, signal 876701/978051 (executing program) 2021/03/01 22:32:20 fetching corpus: 21346, signal 877543/978405 (executing program) 2021/03/01 22:32:20 fetching corpus: 21396, signal 878324/978756 (executing program) 2021/03/01 22:32:21 fetching corpus: 21446, signal 878788/979093 (executing program) 2021/03/01 22:32:21 fetching corpus: 21496, signal 879650/979448 (executing program) 2021/03/01 22:32:21 fetching corpus: 21546, signal 880702/979838 (executing program) 2021/03/01 22:32:21 fetching corpus: 21596, signal 881089/980126 (executing program) 2021/03/01 22:32:21 fetching corpus: 21646, signal 881575/980420 (executing program) 2021/03/01 22:32:21 fetching corpus: 21696, signal 882272/980734 (executing program) 2021/03/01 22:32:21 fetching corpus: 21746, signal 882871/981030 (executing program) 2021/03/01 22:32:21 fetching corpus: 21796, signal 883653/981340 (executing program) 2021/03/01 22:32:22 fetching corpus: 21846, signal 884312/981633 (executing program) 2021/03/01 22:32:22 fetching corpus: 21896, signal 884699/981915 (executing program) 2021/03/01 22:32:22 fetching corpus: 21946, signal 885013/982130 (executing program) 2021/03/01 22:32:22 fetching corpus: 21996, signal 885458/982391 (executing program) 2021/03/01 22:32:22 fetching corpus: 22046, signal 886040/982704 (executing program) 2021/03/01 22:32:22 fetching corpus: 22096, signal 886588/982993 (executing program) 2021/03/01 22:32:23 fetching corpus: 22146, signal 887395/983284 (executing program) 2021/03/01 22:32:23 fetching corpus: 22196, signal 888101/983565 (executing program) 2021/03/01 22:32:23 fetching corpus: 22246, signal 888524/983838 (executing program) 2021/03/01 22:32:23 fetching corpus: 22296, signal 889847/984190 (executing program) 2021/03/01 22:32:23 fetching corpus: 22346, signal 890465/984480 (executing program) 2021/03/01 22:32:23 fetching corpus: 22396, signal 890922/984755 (executing program) 2021/03/01 22:32:23 fetching corpus: 22446, signal 891335/985024 (executing program) 2021/03/01 22:32:23 fetching corpus: 22496, signal 891832/985280 (executing program) 2021/03/01 22:32:24 fetching corpus: 22546, signal 892378/985514 (executing program) 2021/03/01 22:32:24 fetching corpus: 22596, signal 892857/985761 (executing program) 2021/03/01 22:32:24 fetching corpus: 22646, signal 893493/986042 (executing program) 2021/03/01 22:32:24 fetching corpus: 22696, signal 894007/986291 (executing program) 2021/03/01 22:32:24 fetching corpus: 22746, signal 894562/986523 (executing program) 2021/03/01 22:32:24 fetching corpus: 22796, signal 894925/986740 (executing program) 2021/03/01 22:32:24 fetching corpus: 22846, signal 895635/986981 (executing program) 2021/03/01 22:32:25 fetching corpus: 22896, signal 896193/987208 (executing program) 2021/03/01 22:32:25 fetching corpus: 22946, signal 896531/987435 (executing program) 2021/03/01 22:32:25 fetching corpus: 22996, signal 897210/987661 (executing program) 2021/03/01 22:32:25 fetching corpus: 23046, signal 897766/987883 (executing program) 2021/03/01 22:32:25 fetching corpus: 23096, signal 898212/988108 (executing program) 2021/03/01 22:32:25 fetching corpus: 23146, signal 898972/988338 (executing program) 2021/03/01 22:32:25 fetching corpus: 23196, signal 899477/988536 (executing program) 2021/03/01 22:32:25 fetching corpus: 23246, signal 899982/988745 (executing program) 2021/03/01 22:32:25 fetching corpus: 23296, signal 900554/988980 (executing program) 2021/03/01 22:32:26 fetching corpus: 23346, signal 901181/989211 (executing program) 2021/03/01 22:32:26 fetching corpus: 23396, signal 901760/989453 (executing program) 2021/03/01 22:32:26 fetching corpus: 23446, signal 902186/989698 (executing program) 2021/03/01 22:32:26 fetching corpus: 23496, signal 902704/989900 (executing program) 2021/03/01 22:32:26 fetching corpus: 23546, signal 903181/990090 (executing program) 2021/03/01 22:32:26 fetching corpus: 23596, signal 903600/990310 (executing program) 2021/03/01 22:32:26 fetching corpus: 23646, signal 903993/990516 (executing program) 2021/03/01 22:32:27 fetching corpus: 23696, signal 904597/990725 (executing program) 2021/03/01 22:32:27 fetching corpus: 23746, signal 905193/990915 (executing program) 2021/03/01 22:32:27 fetching corpus: 23796, signal 905882/991116 (executing program) 2021/03/01 22:32:27 fetching corpus: 23846, signal 906280/991319 (executing program) 2021/03/01 22:32:27 fetching corpus: 23896, signal 907064/991537 (executing program) 2021/03/01 22:32:27 fetching corpus: 23946, signal 907850/991730 (executing program) 2021/03/01 22:32:27 fetching corpus: 23996, signal 908396/991932 (executing program) 2021/03/01 22:32:27 fetching corpus: 24046, signal 908958/992097 (executing program) 2021/03/01 22:32:28 fetching corpus: 24096, signal 909371/992267 (executing program) 2021/03/01 22:32:28 fetching corpus: 24146, signal 909967/992432 (executing program) 2021/03/01 22:32:28 fetching corpus: 24196, signal 910985/992642 (executing program) 2021/03/01 22:32:28 fetching corpus: 24246, signal 911368/992825 (executing program) 2021/03/01 22:32:28 fetching corpus: 24296, signal 911949/992986 (executing program) 2021/03/01 22:32:28 fetching corpus: 24346, signal 912562/993166 (executing program) 2021/03/01 22:32:28 fetching corpus: 24396, signal 913206/993362 (executing program) 2021/03/01 22:32:28 fetching corpus: 24446, signal 913826/993523 (executing program) 2021/03/01 22:32:29 fetching corpus: 24496, signal 914177/993694 (executing program) 2021/03/01 22:32:29 fetching corpus: 24546, signal 915161/993867 (executing program) 2021/03/01 22:32:29 fetching corpus: 24596, signal 915716/994056 (executing program) 2021/03/01 22:32:29 fetching corpus: 24646, signal 916351/994237 (executing program) 2021/03/01 22:32:29 fetching corpus: 24696, signal 916883/994397 (executing program) 2021/03/01 22:32:29 fetching corpus: 24746, signal 917315/994543 (executing program) 2021/03/01 22:32:29 fetching corpus: 24796, signal 918056/994681 (executing program) 2021/03/01 22:32:30 fetching corpus: 24846, signal 918880/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 24896, signal 919629/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 24946, signal 920061/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 24996, signal 920431/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 25046, signal 920757/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 25096, signal 921149/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 25146, signal 921454/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 25196, signal 921906/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 25246, signal 922263/994736 (executing program) 2021/03/01 22:32:30 fetching corpus: 25296, signal 922935/994736 (executing program) 2021/03/01 22:32:31 fetching corpus: 25346, signal 923515/994736 (executing program) [ 132.495911][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.502267][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/01 22:32:31 fetching corpus: 25396, signal 924117/994736 (executing program) 2021/03/01 22:32:31 fetching corpus: 25446, signal 924520/994736 (executing program) 2021/03/01 22:32:31 fetching corpus: 25496, signal 924778/994736 (executing program) 2021/03/01 22:32:31 fetching corpus: 25546, signal 925446/994738 (executing program) 2021/03/01 22:32:31 fetching corpus: 25596, signal 925831/994738 (executing program) 2021/03/01 22:32:31 fetching corpus: 25646, signal 926375/994743 (executing program) 2021/03/01 22:32:31 fetching corpus: 25696, signal 926944/994745 (executing program) 2021/03/01 22:32:31 fetching corpus: 25746, signal 927330/994745 (executing program) 2021/03/01 22:32:31 fetching corpus: 25796, signal 928133/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 25846, signal 928539/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 25896, signal 928934/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 25946, signal 929281/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 25996, signal 929623/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 26046, signal 930155/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 26096, signal 930682/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 26146, signal 931149/994745 (executing program) 2021/03/01 22:32:32 fetching corpus: 26196, signal 931623/994745 (executing program) 2021/03/01 22:32:33 fetching corpus: 26246, signal 932454/994745 (executing program) 2021/03/01 22:32:33 fetching corpus: 26296, signal 932764/994745 (executing program) 2021/03/01 22:32:33 fetching corpus: 26346, signal 933365/994745 (executing program) 2021/03/01 22:32:33 fetching corpus: 26396, signal 933766/994745 (executing program) 2021/03/01 22:32:33 fetching corpus: 26446, signal 934288/994745 (executing program) 2021/03/01 22:32:33 fetching corpus: 26496, signal 934684/994756 (executing program) 2021/03/01 22:32:33 fetching corpus: 26546, signal 935231/994756 (executing program) 2021/03/01 22:32:33 fetching corpus: 26596, signal 935555/994756 (executing program) 2021/03/01 22:32:33 fetching corpus: 26646, signal 935823/994759 (executing program) 2021/03/01 22:32:33 fetching corpus: 26696, signal 936822/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 26746, signal 937368/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 26796, signal 937743/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 26846, signal 938277/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 26896, signal 938795/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 26946, signal 939166/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 26996, signal 939576/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 27046, signal 939838/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 27096, signal 940282/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 27146, signal 940797/994760 (executing program) 2021/03/01 22:32:34 fetching corpus: 27196, signal 941389/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27246, signal 942218/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27296, signal 942888/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27346, signal 943717/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27396, signal 944280/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27446, signal 944891/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27496, signal 945207/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27546, signal 945536/994760 (executing program) 2021/03/01 22:32:35 fetching corpus: 27596, signal 945909/994760 (executing program) 2021/03/01 22:32:36 fetching corpus: 27646, signal 946461/994760 (executing program) 2021/03/01 22:32:36 fetching corpus: 27696, signal 946944/994760 (executing program) 2021/03/01 22:32:36 fetching corpus: 27746, signal 947317/994760 (executing program) 2021/03/01 22:32:36 fetching corpus: 27796, signal 948406/994768 (executing program) 2021/03/01 22:32:36 fetching corpus: 27846, signal 949142/994768 (executing program) 2021/03/01 22:32:36 fetching corpus: 27896, signal 949584/994768 (executing program) 2021/03/01 22:32:36 fetching corpus: 27946, signal 950128/994768 (executing program) 2021/03/01 22:32:36 fetching corpus: 27996, signal 950727/994768 (executing program) 2021/03/01 22:32:37 fetching corpus: 28046, signal 951132/994768 (executing program) 2021/03/01 22:32:37 fetching corpus: 28096, signal 951835/994768 (executing program) 2021/03/01 22:32:37 fetching corpus: 28146, signal 952100/994768 (executing program) 2021/03/01 22:32:37 fetching corpus: 28196, signal 952402/994770 (executing program) 2021/03/01 22:32:37 fetching corpus: 28246, signal 952776/994770 (executing program) 2021/03/01 22:32:37 fetching corpus: 28296, signal 953170/994770 (executing program) 2021/03/01 22:32:37 fetching corpus: 28346, signal 953543/994770 (executing program) 2021/03/01 22:32:37 fetching corpus: 28396, signal 953947/994770 (executing program) 2021/03/01 22:32:37 fetching corpus: 28446, signal 954416/994770 (executing program) 2021/03/01 22:32:37 fetching corpus: 28496, signal 954817/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28546, signal 955279/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28596, signal 955554/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28646, signal 956021/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28696, signal 956328/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28746, signal 956824/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28796, signal 957199/994772 (executing program) 2021/03/01 22:32:38 fetching corpus: 28846, signal 957825/994775 (executing program) 2021/03/01 22:32:38 fetching corpus: 28896, signal 958087/994775 (executing program) 2021/03/01 22:32:39 fetching corpus: 28946, signal 959139/994777 (executing program) 2021/03/01 22:32:39 fetching corpus: 28996, signal 959593/994777 (executing program) 2021/03/01 22:32:39 fetching corpus: 29046, signal 960213/994777 (executing program) 2021/03/01 22:32:39 fetching corpus: 29096, signal 960626/994780 (executing program) 2021/03/01 22:32:39 fetching corpus: 29146, signal 961043/994780 (executing program) 2021/03/01 22:32:39 fetching corpus: 29196, signal 961545/994780 (executing program) 2021/03/01 22:32:39 fetching corpus: 29246, signal 961938/994780 (executing program) 2021/03/01 22:32:40 fetching corpus: 29296, signal 962437/994780 (executing program) 2021/03/01 22:32:40 fetching corpus: 29346, signal 962887/994780 (executing program) 2021/03/01 22:32:40 fetching corpus: 29396, signal 963242/994782 (executing program) 2021/03/01 22:32:40 fetching corpus: 29446, signal 963926/994782 (executing program) 2021/03/01 22:32:40 fetching corpus: 29496, signal 964218/994782 (executing program) 2021/03/01 22:32:40 fetching corpus: 29546, signal 964713/994782 (executing program) 2021/03/01 22:32:40 fetching corpus: 29596, signal 967152/994782 (executing program) 2021/03/01 22:32:40 fetching corpus: 29646, signal 967479/994782 (executing program) 2021/03/01 22:32:40 fetching corpus: 29696, signal 967736/994782 (executing program) 2021/03/01 22:32:41 fetching corpus: 29746, signal 968229/994782 (executing program) 2021/03/01 22:32:41 fetching corpus: 29796, signal 968981/994782 (executing program) 2021/03/01 22:32:41 fetching corpus: 29846, signal 969460/994782 (executing program) 2021/03/01 22:32:41 fetching corpus: 29896, signal 969798/994782 (executing program) 2021/03/01 22:32:41 fetching corpus: 29946, signal 970430/994782 (executing program) 2021/03/01 22:32:41 fetching corpus: 29996, signal 970714/994787 (executing program) 2021/03/01 22:32:41 fetching corpus: 30046, signal 971032/994787 (executing program) 2021/03/01 22:32:41 fetching corpus: 30096, signal 971504/994802 (executing program) 2021/03/01 22:32:41 fetching corpus: 30146, signal 972236/994802 (executing program) 2021/03/01 22:32:42 fetching corpus: 30196, signal 972575/994802 (executing program) 2021/03/01 22:32:42 fetching corpus: 30246, signal 972880/994802 (executing program) 2021/03/01 22:32:42 fetching corpus: 30296, signal 973137/994802 (executing program) 2021/03/01 22:32:42 fetching corpus: 30346, signal 973551/994802 (executing program) 2021/03/01 22:32:42 fetching corpus: 30396, signal 973951/994802 (executing program) 2021/03/01 22:32:42 fetching corpus: 30446, signal 974365/994805 (executing program) 2021/03/01 22:32:42 fetching corpus: 30496, signal 974700/994805 (executing program) 2021/03/01 22:32:42 fetching corpus: 30546, signal 975058/994805 (executing program) 2021/03/01 22:32:42 fetching corpus: 30596, signal 975599/994882 (executing program) 2021/03/01 22:32:42 fetching corpus: 30633, signal 975888/994882 (executing program) 2021/03/01 22:32:42 fetching corpus: 30633, signal 975888/994882 (executing program) 2021/03/01 22:32:44 starting 6 fuzzer processes 22:32:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 22:32:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) 22:32:45 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000500)='pids.current\x00', 0x0, 0x0) 22:32:45 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)={0x18, 0x3a, 0x272d00be03633651, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 22:32:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:32:46 executing program 5: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) [ 147.813737][ T8412] IPVS: ftp: loaded support on port[0] = 21 [ 147.912445][ T8414] IPVS: ftp: loaded support on port[0] = 21 [ 148.129240][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 148.190582][ T8416] IPVS: ftp: loaded support on port[0] = 21 [ 148.294796][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 148.373262][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.391708][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.405317][ T8412] device bridge_slave_0 entered promiscuous mode [ 148.451581][ T8418] IPVS: ftp: loaded support on port[0] = 21 [ 148.454951][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.469123][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.479456][ T8412] device bridge_slave_1 entered promiscuous mode [ 148.518018][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.535558][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.559538][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.567671][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.584708][ T8414] device bridge_slave_0 entered promiscuous mode [ 148.613331][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.623681][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.632794][ T8414] device bridge_slave_1 entered promiscuous mode [ 148.727651][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.787907][ T8412] team0: Port device team_slave_0 added [ 148.795650][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.812526][ T8416] chnl_net:caif_netlink_parms(): no params data found [ 148.833043][ T8412] team0: Port device team_slave_1 added [ 148.850155][ T8420] IPVS: ftp: loaded support on port[0] = 21 [ 148.896010][ T8414] team0: Port device team_slave_0 added [ 148.961147][ T8414] team0: Port device team_slave_1 added [ 148.968423][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.976112][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.011310][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.049788][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.050532][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 149.057647][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.088980][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.118803][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.130238][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.157300][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.209724][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.217466][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.243711][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.261080][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.268408][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.277652][ T8416] device bridge_slave_0 entered promiscuous mode [ 149.287642][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.299646][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.307917][ T8416] device bridge_slave_1 entered promiscuous mode [ 149.337617][ T8412] device hsr_slave_0 entered promiscuous mode [ 149.345081][ T8412] device hsr_slave_1 entered promiscuous mode [ 149.410549][ T8416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.433222][ T8414] device hsr_slave_0 entered promiscuous mode [ 149.440641][ T8414] device hsr_slave_1 entered promiscuous mode [ 149.448262][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.456922][ T8414] Cannot create hsr debugfs directory [ 149.482395][ T8416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.549927][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 149.590194][ T8416] team0: Port device team_slave_0 added [ 149.652259][ T8416] team0: Port device team_slave_1 added [ 149.722163][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 149.774801][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 149.791471][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.798987][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.825925][ T8416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.843546][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.850681][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.877596][ T8416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.934842][ T2969] Bluetooth: hci1: command 0x0409 tx timeout [ 150.003076][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 150.034738][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.041837][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.053759][ T8418] device bridge_slave_0 entered promiscuous mode [ 150.064425][ T8416] device hsr_slave_0 entered promiscuous mode [ 150.072051][ T8416] device hsr_slave_1 entered promiscuous mode [ 150.079395][ T8416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.088112][ T8416] Cannot create hsr debugfs directory [ 150.112580][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.119829][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.128375][ T8418] device bridge_slave_1 entered promiscuous mode [ 150.174567][ T19] Bluetooth: hci2: command 0x0409 tx timeout [ 150.210236][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.232888][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.289883][ T8412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.307963][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.316060][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.325152][ T8433] device bridge_slave_0 entered promiscuous mode [ 150.353439][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.361346][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.370199][ T8420] device bridge_slave_0 entered promiscuous mode [ 150.382439][ T8412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.391996][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.399635][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.409047][ T8433] device bridge_slave_1 entered promiscuous mode [ 150.416116][ T19] Bluetooth: hci3: command 0x0409 tx timeout [ 150.424887][ T8418] team0: Port device team_slave_0 added [ 150.431004][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.438358][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.447064][ T8420] device bridge_slave_1 entered promiscuous mode [ 150.474862][ T8412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.485544][ T8412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.503305][ T8418] team0: Port device team_slave_1 added [ 150.557988][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.577209][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.592337][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.602313][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.609731][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.635968][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.650379][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.657997][ T19] Bluetooth: hci4: command 0x0409 tx timeout [ 150.662198][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.690658][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.704127][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.737051][ T8433] team0: Port device team_slave_0 added [ 150.745200][ T8414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.789006][ T8433] team0: Port device team_slave_1 added [ 150.802239][ T8414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.817748][ T8414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.838860][ T8420] team0: Port device team_slave_0 added [ 150.854516][ T8414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.886210][ T8420] team0: Port device team_slave_1 added [ 150.893594][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.902030][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 150.911100][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.938192][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.951602][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.959065][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.986740][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.002723][ T8418] device hsr_slave_0 entered promiscuous mode [ 151.010011][ T8418] device hsr_slave_1 entered promiscuous mode [ 151.018194][ T8418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.026577][ T8418] Cannot create hsr debugfs directory [ 151.101261][ T8433] device hsr_slave_0 entered promiscuous mode [ 151.108561][ T8433] device hsr_slave_1 entered promiscuous mode [ 151.116615][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.124923][ T8433] Cannot create hsr debugfs directory [ 151.130884][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.138428][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.164435][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.185736][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.192689][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.220141][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.248295][ T8416] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.289073][ T8416] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.336737][ T8416] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.350504][ T8420] device hsr_slave_0 entered promiscuous mode [ 151.357983][ T8420] device hsr_slave_1 entered promiscuous mode [ 151.364950][ T8420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.372520][ T8420] Cannot create hsr debugfs directory [ 151.415267][ T8416] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.465438][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.584436][ T8412] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.630143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.639821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.659003][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.683991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.693139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.704999][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.712349][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.722938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.754240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.762819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.789805][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.796990][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.819563][ T8433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.854543][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.862288][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.872127][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 151.878882][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.890296][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.899380][ T8433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.908963][ T8433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.920130][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.961001][ T8433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.984641][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.993202][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.003702][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.010857][ T8962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.019239][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.023995][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 152.034358][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.042769][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.049893][ T8962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.059387][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.074567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.096801][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.105880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.121351][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.131634][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.163590][ T8416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.172668][ T8418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.189595][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.204999][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.213224][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.225327][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.233540][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.242362][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.251407][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.261164][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.264030][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 152.276414][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.291943][ T8418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.301895][ T8418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.328310][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.340343][ T8418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.364169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.372694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.387514][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.398123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.407232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.416960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.450697][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.478238][ T8420] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.487602][ T8420] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.504061][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 152.512792][ T8420] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.527679][ T8420] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.547237][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.556975][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.566770][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.577374][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.586909][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.594160][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.603620][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.628671][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.650811][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.669213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.677484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.686618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.696227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.705309][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.712416][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.720780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.733294][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.740771][ T3173] Bluetooth: hci4: command 0x041b tx timeout [ 152.777847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.789801][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.799283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.808452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.818872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.828586][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.838291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.869606][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.889165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.897416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.907139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.915360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.923559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.932821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.942066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.950941][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.958065][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.974314][ T9704] Bluetooth: hci5: command 0x041b tx timeout [ 153.008093][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.016179][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.025195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.034461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.042923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.052393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.061191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.070488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.079366][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.086477][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.094723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.118794][ T8416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.142907][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.193614][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.202230][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.211561][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.222639][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.231637][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.239694][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.253626][ T8412] device veth0_vlan entered promiscuous mode [ 153.270529][ T8416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.289207][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.301255][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.311819][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.323336][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.332158][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.340885][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.349624][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.362602][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.385872][ T8412] device veth1_vlan entered promiscuous mode [ 153.397376][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.406474][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.414901][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.423469][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.433055][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.453560][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.507971][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.529426][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.550223][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.559122][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.567662][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.577378][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.586625][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.596118][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.605064][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.613541][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.624653][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.631687][ T9467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.657551][ T8414] device veth0_vlan entered promiscuous mode [ 153.673638][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.684958][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.692605][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.701497][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.710460][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.718863][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.728578][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.740327][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.765093][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.780652][ T8412] device veth0_macvtap entered promiscuous mode [ 153.793645][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.802192][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.814272][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.821703][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.830786][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.839904][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.847053][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.855615][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.864451][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.872754][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.888062][ T8414] device veth1_vlan entered promiscuous mode [ 153.914433][ T8416] device veth0_vlan entered promiscuous mode [ 153.927114][ T8412] device veth1_macvtap entered promiscuous mode [ 153.940147][ T2969] Bluetooth: hci0: command 0x040f tx timeout [ 153.946481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.955244][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.963281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.972383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.994716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.003499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.025166][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.032254][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.064114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.094671][ T9726] Bluetooth: hci1: command 0x040f tx timeout [ 154.126327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.143236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.152999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.162542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.171264][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.178412][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.188210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.197671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.206513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.219155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.228206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.237517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.246804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.256284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.265342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.274466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.287041][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.295741][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.312504][ T8418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.325409][ T8418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.336269][ T2969] Bluetooth: hci2: command 0x040f tx timeout [ 154.342785][ T8416] device veth1_vlan entered promiscuous mode [ 154.375534][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.386705][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.400163][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.410014][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.419517][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.428022][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.436689][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.458241][ T8420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.474177][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.490997][ T8414] device veth0_macvtap entered promiscuous mode [ 154.513228][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.524590][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.532261][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.541622][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.550678][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.559802][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.584420][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 154.598270][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.612948][ T8414] device veth1_macvtap entered promiscuous mode [ 154.622382][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.631755][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.640356][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.648233][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.657512][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.678745][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.705431][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.722216][ T8416] device veth0_macvtap entered promiscuous mode [ 154.749490][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.758401][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.768817][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.777986][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.787347][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.797534][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.807025][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.818839][ T8412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.828710][ T31] Bluetooth: hci4: command 0x040f tx timeout [ 154.836196][ T8412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.845784][ T8412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.855071][ T8412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.867776][ T8416] device veth1_macvtap entered promiscuous mode [ 154.880216][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.892475][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.906401][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.917605][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.926032][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.933421][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.941618][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.950899][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.984718][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.995216][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.010318][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.027448][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.039321][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.051232][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.059245][ T9713] Bluetooth: hci5: command 0x040f tx timeout [ 155.067814][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.080527][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.091380][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.102371][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.114508][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.127467][ T8433] device veth0_vlan entered promiscuous mode [ 155.136026][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.144890][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.152524][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.161473][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.170662][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.179956][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.188832][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.198228][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.214428][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.234211][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.246454][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.257867][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.271162][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.284401][ T8414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.293102][ T8414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.306021][ T8414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.315346][ T8414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.342705][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.355931][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.375987][ T8416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.387778][ T8416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.400856][ T8416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.414707][ T8416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.483549][ T8433] device veth1_vlan entered promiscuous mode [ 155.546294][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.575355][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.592582][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.626442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.643550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.675663][ T8418] device veth0_vlan entered promiscuous mode [ 155.722664][ T8418] device veth1_vlan entered promiscuous mode [ 155.731398][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.741240][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.768943][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.803527][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.849184][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.857893][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.876955][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.889071][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.899529][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.917358][ T8433] device veth0_macvtap entered promiscuous mode [ 155.928366][ T8420] device veth0_vlan entered promiscuous mode [ 155.957711][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.966518][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.990782][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.004486][ T8433] device veth1_macvtap entered promiscuous mode [ 156.014785][ T31] Bluetooth: hci0: command 0x0419 tx timeout [ 156.026412][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.076697][ T8420] device veth1_vlan entered promiscuous mode [ 156.087324][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.112217][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.127150][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.144734][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.162057][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.182148][ T612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.190239][ T8418] device veth0_macvtap entered promiscuous mode [ 156.194009][ T9704] Bluetooth: hci1: command 0x0419 tx timeout [ 156.218161][ T8418] device veth1_macvtap entered promiscuous mode [ 156.224199][ T612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.256010][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.272574][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.289294][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.300161][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.310288][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.321112][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.333240][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.350966][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.359837][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.368873][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.377941][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.386135][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.395750][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.412475][ T612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.422522][ T9672] Bluetooth: hci2: command 0x0419 tx timeout [ 156.431701][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.460144][ T612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.462510][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.479087][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.490063][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.501750][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.512945][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.529595][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.547178][ T612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.550546][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.565930][ T612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.583153][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.594964][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.605464][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.615559][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.626630][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.637073][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.651863][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.663066][ T9726] Bluetooth: hci3: command 0x0419 tx timeout [ 156.669597][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.681511][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.691603][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.700117][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.710238][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.719447][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.729855][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.740073][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.755633][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.764846][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.780782][ T8420] device veth0_macvtap entered promiscuous mode [ 156.795933][ T8433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.807311][ T8433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.817337][ T8433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.827869][ T8433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.849362][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.862169][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.874560][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.894467][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 156.904592][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:32:55 executing program 0: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @remote, 0x31}, 0x80, 0x0}, 0x20048000) [ 156.924865][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.945226][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.963669][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.982902][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.021629][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.042017][ T8418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.050928][ T8418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.065366][ T8418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.066981][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.093101][ T8418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.100259][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.118866][ T8420] device veth1_macvtap entered promiscuous mode [ 157.135638][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.148835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.158126][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.168998][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.191151][ T9672] Bluetooth: hci5: command 0x0419 tx timeout 22:32:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 157.270885][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.294234][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.308628][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.321273][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.331936][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.342984][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.357444][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.385151][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.405254][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.416707][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.440850][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.474924][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.490554][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.518038][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.529788][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:32:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580)='nl80211\x00', r0) [ 157.541818][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.573009][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:32:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @private=0xa010102}, 0x10) [ 157.607169][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.635989][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.646871][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.658984][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.669842][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.682701][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.696276][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.710055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.745153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.777376][ T8420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.806499][ T8420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.819695][ T8420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.833459][ T8420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.919138][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.936331][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:32:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 22:32:56 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) [ 157.978195][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 22:32:56 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f00005c6000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 158.061029][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.127708][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:32:56 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000240), 0x18) [ 158.196035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.203975][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.229966][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.277028][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.332090][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.366408][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.402272][ T9858] IPVS: ftp: loaded support on port[0] = 21 [ 158.410573][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.436276][ T612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.465696][ T612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:32:57 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x0, 0x1}}, 0x2e) 22:32:57 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 158.626926][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.713966][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.763854][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.784185][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:32:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43}, 0x10) 22:32:57 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 22:32:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:32:57 executing program 2: unshare(0x400) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 22:32:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 22:32:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 22:32:57 executing program 1: unshare(0x400) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 159.033678][ T9713] usb 4-1: new high-speed USB device number 2 using dummy_hcd 22:32:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43}, 0x10) 22:32:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 159.201686][ T9935] IPVS: ftp: loaded support on port[0] = 21 22:32:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0xa, 0x801}, 0x14}}, 0x0) 22:32:57 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/urandom\x00', 0x103001, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self/attr/exec\x00', 0x2, 0x0) splice(r0, &(0x7f0000000fc0), r1, &(0x7f0000001040), 0x8, 0x0) [ 159.268369][ T9942] IPVS: ftp: loaded support on port[0] = 21 [ 159.283409][ C0] hrtimer: interrupt took 75955 ns [ 159.283700][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 159.444113][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.499746][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.531852][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.564640][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.611353][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.626456][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 159.793779][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.803598][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.811885][ T9713] usb 4-1: Product: syz [ 159.819712][ T9713] usb 4-1: Manufacturer: syz [ 159.826637][ T9713] usb 4-1: SerialNumber: syz [ 160.545059][ T9713] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 160.551490][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 160.589689][ T9713] cdc_ncm 4-1:1.1: bind() failure [ 160.666572][ T9713] usb 4-1: USB disconnect, device number 2 [ 161.293777][ T4291] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.533938][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 161.663706][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.675351][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.687989][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.699037][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.709418][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.719313][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 161.903688][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.912779][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.921164][ T4291] usb 4-1: Product: syz [ 161.925589][ T4291] usb 4-1: Manufacturer: syz [ 161.930203][ T4291] usb 4-1: SerialNumber: syz 22:33:00 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000200)=0x98) 22:33:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x11, &(0x7f00000000c0)={@multicast2, @loopback, @private}, 0xc) 22:33:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002bc0)={0x14, 0x0, &(0x7f0000002b00)=[@dead_binder_done, @increfs], 0x0, 0x0, 0x0}) 22:33:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 162.073647][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 162.087608][ T4291] cdc_ncm 4-1:1.1: bind() failure [ 162.163835][ T4291] usb 4-1: USB disconnect, device number 3 22:33:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 22:33:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)='8', 0x1}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0x4}], 0x18}], 0x146, 0x0) 22:33:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 162.290494][T10046] IPVS: ftp: loaded support on port[0] = 21 22:33:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 22:33:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 162.618886][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.643768][ T4291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.682193][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.904367][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 163.041674][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.059564][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.081312][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.092724][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.112394][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.132157][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 163.343926][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.354701][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.375060][ T4291] usb 4-1: Product: syz [ 163.379346][ T4291] usb 4-1: Manufacturer: syz [ 163.393719][ T4291] usb 4-1: SerialNumber: syz [ 164.103517][ T4291] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 164.109626][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 164.137486][ T4291] cdc_ncm 4-1:1.1: bind() failure [ 164.152657][ T4291] usb 4-1: USB disconnect, device number 4 22:33:03 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 22:33:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 22:33:03 executing program 1: r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0, r0}, 0x0, 0x0, 0x0) 22:33:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) [ 164.697199][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:03 executing program 1: pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0xd03, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0xf}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)=0x7) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 22:33:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 164.821754][T10133] IPVS: ftp: loaded support on port[0] = 21 22:33:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 164.950469][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:03 executing program 1: ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x503080, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x3) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002800050ad25a802e8c63940d0424fc600c00184004ac0f000dac0f0037153e370a00038004000008d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0x38, &(0x7f00000001c0)=""/56}) [ 165.033431][ T9713] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 165.283553][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 165.403654][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.420432][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.445008][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.456993][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.467888][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.478638][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 165.643491][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.652590][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.663091][ T9713] usb 4-1: Product: syz [ 165.668068][ T9713] usb 4-1: Manufacturer: syz [ 165.672705][ T9713] usb 4-1: SerialNumber: syz [ 166.383503][ T9713] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 166.389794][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 166.406893][ T9713] cdc_ncm 4-1:1.1: bind() failure [ 166.434171][ T9713] usb 4-1: USB disconnect, device number 5 22:33:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:05 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8004ae98, &(0x7f0000000080)) 22:33:05 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 22:33:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="80cfdbe3817e8d95e5032152112e9b20336d6820185ea569f45dc9dcba3ffc403ca59f36899f08c3ffff347fc96b0daf4d97c078d34099eca442cb436989c39fa0535af15a5696104812b179b6496cda1c15ec3e2a6cead0b301a07ee49abe3b3aa0a69a0c6c6818a707a07129fd7b558d8f4ba5a7820e6c3157836c9491c3bc5286a4b8aead6113f0cb6e6046f45896846e9f9e05d08e30860ddbb307b8b50ed6c2a30b8ac006229f5c4622985d76dd74551de2d7f4527987e573edc95affcbc376b0f0ab313815a5822862101ce3951563f8c87a16ab06d13f1802d260b8c28bef6ced03727a7ac40a15bc9c20f42b62b5cead1a23434336bcf78fd45f40da07f8d06fa9d2143d1a74b916cad11db2498b3cedfe8d080ede3e946abd1ff7463271ca7372548d9448820871714d8acb257c81797b79d16d82b697026b82167e6b0836934983a4ddf6eb5e1a2a48657b303ff6cfc84521d9b161f2e65ae90420533622ee58a2a1fe7ddb81f1e681336d46e5cf04d1d782cb24082f1bf2ddea3d79e03fd10d7bf3e3fde509abb13cda46a2fac7751d0a60d9ae2663e5d24c31faf936f769cd734c6f81a9f96eef6cf75ab8950095aa851b7e6fe0e95c8244c00267faf69ecb22b79479b5e5ad9195843b396a1f3917ab949ef888502735eeeb9fc8fdcf77cafa665d30dcacf945a9f45d89ce3f25f4e10152b5ce7f0d6b265ce1c459cf210b949ce23ad9042e18f5f3bf14d2a0bcde505b52d1114b7e5afd425dc495a682e92c773c60dfd9e60af6a8df5be8822b4fbeb9f01c3311ba73ccb122e1d1b9d50601a0f2a0e8976cbad165cb9ace78f69d5cb23eb81f14c5393442e64b0c22774e55db06ddd3b30414f60a388ebb563b4cfe0b955c46b73c30e2c26f12e61c59a4d99b81ca5988f986008d37d53a581211a7689825c828723575dc7b9afcec22cbb31aa9ec5f9f1a2e3e264d10e67422d5b74300712128de08aea731fb5f300d01139ec3850f51135afd994d91b3a09d20d98fe9ebfd217a3f5551d6c1dd23cde678bf856966e8971b8e85700d689cd547592aed6a0c90b4b2fbb7cb202ddacae5fa04a1aefbf1186be203d036e23ca6155e0d23c7aec6ce8917c1b635c5c34cee166600d4f9745c9b3e9358c1bc5d21999533497c79e2ab46c3b933cfc7d6869eca387dfa32efaddb67f713d8af7ed3f94944d7ae98786ccbfbab6dc36a3e22c8b199cdb27236de9757e68b7187f921055663b944723d71230c3c3da9582fc98fda92541864b82889baaee7ec935f97d275471d38625cf37c9d7ef8400ccda296b5845e8384e353bb9af00cba91ccb468ed8ccb0ade45fa04335f7a8432d4ccc477b5c0dbf2120e603c1bee17cb6301e584dec2cbb52a44f0443b122dd084ad1814bd8ccef4a9d3b61a9bf4d1895241d747526dabcd4bbae34d887f"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 166.949951][T10200] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 166.976605][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:05 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012"], 0x200}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) 22:33:05 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x6, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) 22:33:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:05 executing program 4: set_mempolicy(0x4002, &(0x7f0000000080)=0x10040101, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 167.190755][T10219] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.227650][T10219] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.270773][T10219] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. 22:33:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 167.313376][ T9713] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.336975][T10219] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.583423][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 167.703549][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.734195][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.753283][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.763052][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 167.773611][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.783842][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 167.983674][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.992764][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.011484][ T9713] usb 4-1: Product: syz [ 168.018535][ T9713] usb 4-1: Manufacturer: syz [ 168.024369][ T9713] usb 4-1: SerialNumber: syz [ 168.743394][ T9713] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 168.749691][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 168.769734][ T9713] cdc_ncm 4-1:1.1: bind() failure [ 168.785316][ T9713] usb 4-1: USB disconnect, device number 6 22:33:07 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:07 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1000) 22:33:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000bc0)={0x2000000a}) 22:33:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:07 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000001"], 0x119) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) 22:33:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 169.620787][ T3173] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.673454][ T9713] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.687105][ T3173] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 169.748745][ T9856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.767229][ T9856] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 169.946586][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 170.063622][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.075398][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.087208][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.098036][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 170.108904][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.120351][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 170.283662][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.293020][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.311047][ T9713] usb 4-1: Product: syz [ 170.316390][ T9713] usb 4-1: Manufacturer: syz [ 170.326092][ T9713] usb 4-1: SerialNumber: syz [ 171.033315][ T9713] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 171.039434][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 171.056650][ T9713] cdc_ncm 4-1:1.1: bind() failure [ 171.074651][ T9713] usb 4-1: USB disconnect, device number 7 22:33:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046205, 0x7ffffffff000) 22:33:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0x178, 0x18, &(0x7f0000000680)="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"}) 22:33:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:10 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 171.610168][T10333] binder: 10325:10333 ioctl 40046205 7ffffffff000 returned -22 22:33:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000000700fff64017db9820000000000000d423ffff630627e59aa1"], 0x259) 22:33:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:10 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) [ 171.898686][ C1] sd 0:0:1:0: [sg0] tag#3929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 171.909221][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB: Test Unit Ready [ 171.915755][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 171.925576][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 171.935219][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 171.944860][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 171.953499][ T9856] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.954501][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 171.971639][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 171.981276][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 171.990920][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.000555][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.010192][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.019839][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.029471][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.039116][ C1] sd 0:0:1:0: [sg0] tag#3929 CDB[c0]: 00 00 00 00 00 00 00 00 22:33:10 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000240)) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a00)=0x14, 0x80000) [ 172.080044][ C1] sd 0:0:1:0: [sg0] tag#3931 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 172.090543][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB: Test Unit Ready [ 172.097069][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.106722][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.116492][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.126170][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.135802][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.145436][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.155062][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.164714][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.174603][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.184229][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.194098][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.203259][ T9856] usb 4-1: Using ep0 maxpacket: 32 [ 172.203720][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.218386][ C1] sd 0:0:1:0: [sg0] tag#3931 CDB[c0]: 00 00 00 00 00 00 00 00 22:33:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 172.353894][ T9856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.391167][ T9856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.483623][ T9856] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.506538][ T9856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.530302][ T9856] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.551665][ T9856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 22:33:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x9, 0x1) 22:33:11 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) [ 172.733769][ T9856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.755416][ T9856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.765250][ T9856] usb 4-1: Product: syz [ 172.769620][ T9856] usb 4-1: Manufacturer: syz [ 172.775438][ T9856] usb 4-1: SerialNumber: syz [ 173.497796][ T9856] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 173.504186][ T9856] cdc_ncm 4-1:1.0: bind() failure [ 173.511792][ T9856] cdc_ncm 4-1:1.1: bind() failure [ 173.530238][ T9856] usb 4-1: USB disconnect, device number 8 22:33:12 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:12 executing program 1: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380200000000000904"], 0x0) 22:33:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:12 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) dup3(r5, r1, 0x0) 22:33:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x54, 0x0) 22:33:12 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x54, 0x0) 22:33:12 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:12 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) [ 174.303244][ T9856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 174.383212][ T9672] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.553051][ T9856] usb 2-1: Using ep0 maxpacket: 16 [ 174.643653][ T9672] usb 4-1: Using ep0 maxpacket: 32 [ 174.687919][ T9856] usb 2-1: config index 0 descriptor too short (expected 568, got 56) [ 174.697155][ T9856] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 174.722046][ T9856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.738946][ T9856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 174.783377][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.794478][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.806450][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.817750][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 174.829478][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.840107][ T9856] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.849894][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 174.861294][ T9856] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.870210][ T9856] usb 2-1: Manufacturer: syz [ 174.882544][ T9856] usb 2-1: config 0 descriptor?? [ 175.053355][ T9672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.062445][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.071531][ T9672] usb 4-1: Product: syz [ 175.076462][ T9672] usb 4-1: Manufacturer: syz [ 175.082221][ T9672] usb 4-1: SerialNumber: syz [ 175.140390][ T7] usb 2-1: USB disconnect, device number 2 [ 175.785116][ T9672] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 175.791238][ T9672] cdc_ncm 4-1:1.0: bind() failure [ 175.811813][ T9672] cdc_ncm 4-1:1.1: bind() failure [ 175.827118][ T9672] usb 4-1: USB disconnect, device number 9 [ 175.923088][ T9713] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.163030][ T9713] usb 2-1: Using ep0 maxpacket: 16 22:33:14 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 176.331180][ T9713] usb 2-1: config index 0 descriptor too short (expected 568, got 56) [ 176.340549][ T9713] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 176.356736][ T9713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.371962][ T9713] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 176.469141][ T9713] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.481671][ T9713] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.497854][ T9713] usb 2-1: Manufacturer: syz [ 176.509109][ T9713] usb 2-1: config 0 descriptor?? 22:33:15 executing program 1: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380200000000000904"], 0x0) [ 176.760249][ T9856] usb 2-1: USB disconnect, device number 3 22:33:15 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x54, 0x0) 22:33:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@my=0x1}) 22:33:15 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:15 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:15 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}, {&(0x7f0000000280)="1c", 0x1}], 0x2) 22:33:15 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 22:33:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:15 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 177.153089][ T9713] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.323122][ T9856] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.407188][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 177.543530][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.554955][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.567131][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.573046][ T9856] usb 2-1: Using ep0 maxpacket: 16 [ 177.578649][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.592021][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.602761][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.693337][ T9856] usb 2-1: config index 0 descriptor too short (expected 568, got 56) [ 177.701569][ T9856] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 177.720569][ T9856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.731712][ T9856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 177.813288][ T9856] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.820318][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.826879][ T9856] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.840616][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.845550][ T9856] usb 2-1: Manufacturer: syz [ 177.863662][ T9856] usb 2-1: config 0 descriptor?? [ 177.877061][ T9713] usb 4-1: Product: syz [ 177.889219][ T9713] usb 4-1: Manufacturer: syz [ 177.899245][ T9713] usb 4-1: SerialNumber: syz [ 178.121840][ T4291] usb 2-1: USB disconnect, device number 4 [ 178.594283][ T9713] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 178.600380][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 178.619752][ T9713] cdc_ncm 4-1:1.1: bind() failure 22:33:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev, @local, @private2, 0x0, 0x400, 0x3}) 22:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 178.646468][ T9713] usb 4-1: USB disconnect, device number 10 22:33:17 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 22:33:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x10, 0x0) 22:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c6e", 0x14}], 0x1) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:17 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040), 0x0) [ 179.513001][ T4291] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.763020][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 179.893323][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.904524][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.916066][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.927268][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.938513][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.949168][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 180.113104][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.122195][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.132209][ T4291] usb 4-1: Product: syz [ 180.137986][ T4291] usb 4-1: Manufacturer: syz [ 180.142621][ T4291] usb 4-1: SerialNumber: syz [ 180.853090][ T4291] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 180.859170][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 180.878168][ T4291] cdc_ncm 4-1:1.1: bind() failure [ 180.893081][ T4291] usb 4-1: USB disconnect, device number 11 22:33:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040), 0x0) 22:33:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 22:33:19 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:19 executing program 1: mremap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0xf) 22:33:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 22:33:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040), 0x0) 22:33:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:20 executing program 1: unshare(0x400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) 22:33:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 22:33:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 181.783260][ T9714] usb 4-1: new high-speed USB device number 12 using dummy_hcd 22:33:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 182.032840][ T9714] usb 4-1: Using ep0 maxpacket: 32 [ 182.153121][ T9714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.171423][ T9714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.182212][ T9714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.192529][ T9714] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 22:33:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) [ 182.203808][ T9714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.214291][ T9714] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 182.383204][ T9714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.392333][ T9714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.400808][ T9714] usb 4-1: Product: syz [ 182.405234][ T9714] usb 4-1: Manufacturer: syz [ 182.409843][ T9714] usb 4-1: SerialNumber: syz [ 183.123058][ T9714] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 183.129180][ T9714] cdc_ncm 4-1:1.0: bind() failure [ 183.152560][ T9714] cdc_ncm 4-1:1.1: bind() failure [ 183.176298][ T9714] usb 4-1: USB disconnect, device number 12 22:33:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab", 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfec8) fchdir(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) 22:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 22:33:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:22 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 22:33:22 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc0205647, &(0x7f0000000040)) 22:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{}], 0x1) 22:33:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{}], 0x1) [ 183.992944][ T4291] usb 4-1: new high-speed USB device number 13 using dummy_hcd 22:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{}], 0x1) [ 184.248148][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 184.373324][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.392097][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.415334][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.444455][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.463668][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.481938][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 22:33:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) [ 184.662873][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.672107][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.682369][ T4291] usb 4-1: Product: syz [ 184.687626][ T4291] usb 4-1: Manufacturer: syz [ 184.692277][ T4291] usb 4-1: SerialNumber: syz [ 185.392975][ T4291] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 185.399278][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 185.419289][ T4291] cdc_ncm 4-1:1.1: bind() failure [ 185.442070][ T4291] usb 4-1: USB disconnect, device number 13 22:33:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc66", 0xa}], 0x1) 22:33:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc66", 0xa}], 0x1) 22:33:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc66", 0xa}], 0x1) 22:33:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 186.322849][ T9856] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 186.388007][T10762] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.562889][ T9856] usb 4-1: Using ep0 maxpacket: 32 [ 186.727500][ T9856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.739020][ T9856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.750332][ T9856] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.762250][ T9856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 22:33:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 186.773903][ T9856] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.785436][ T9856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 186.973073][ T9856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.982168][ T9856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.991436][ T9856] usb 4-1: Product: syz [ 186.996421][ T9856] usb 4-1: Manufacturer: syz [ 187.001049][ T9856] usb 4-1: SerialNumber: syz [ 187.702014][ T9856] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 187.708285][ T9856] cdc_ncm 4-1:1.0: bind() failure [ 187.726060][ T9856] cdc_ncm 4-1:1.1: bind() failure [ 187.744567][ T9856] usb 4-1: USB disconnect, device number 14 22:33:26 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b07", 0xf}], 0x1) 22:33:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1) pidfd_getfd(r0, r1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 188.295459][T10799] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b07", 0xf}], 0x1) 22:33:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 188.479082][T10809] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b07", 0xf}], 0x1) [ 188.632915][ T9672] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.882775][ T9672] usb 4-1: Using ep0 maxpacket: 32 [ 189.012949][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.024022][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.034400][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.044874][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 189.055643][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.066100][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 189.232940][ T9672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.242213][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.251078][ T9672] usb 4-1: Product: syz [ 189.255376][ T9672] usb 4-1: Manufacturer: syz [ 189.260358][ T9672] usb 4-1: SerialNumber: syz [ 189.972757][ T9672] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 189.978839][ T9672] cdc_ncm 4-1:1.0: bind() failure [ 189.999209][ T9672] cdc_ncm 4-1:1.1: bind() failure [ 190.026399][ T9672] usb 4-1: USB disconnect, device number 15 22:33:28 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b", 0x12}], 0x1) 22:33:28 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffed2) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b", 0x12}], 0x1) [ 190.554518][T10848] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b", 0x12}], 0x1) 22:33:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c", 0x13}], 0x1) [ 190.814876][T10867] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.852691][ T4291] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.131146][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 191.272936][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.284139][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.295284][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.306402][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 191.316818][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.327134][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.522817][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.531900][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.540857][ T4291] usb 4-1: Product: syz [ 191.545689][ T4291] usb 4-1: Manufacturer: syz [ 191.550319][ T4291] usb 4-1: SerialNumber: syz [ 192.052860][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 192.072965][ T4291] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 192.092990][ T4291] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 192.122764][ T4291] usbtest: probe of 4-1:1.1 failed with error -71 [ 192.133822][ T4291] usb 4-1: USB disconnect, device number 16 22:33:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c", 0x13}], 0x1) 22:33:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:31 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffed2) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:33:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8e834e0f3b039697cc660ee80a9b0729f69b3c", 0x13}], 0x1) [ 192.603170][T10906] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 192.870037][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:31 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 193.056391][T10926] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:31 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:33:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 193.451703][T10942] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/42], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 193.705342][T10955] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 193.933783][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.940141][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 22:33:32 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/42], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:32 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 194.138810][T10974] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:32 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/42], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:32 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 194.436468][T10990] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/49], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:33 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:33 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:33 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 195.130124][T11010] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:33 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/49], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:33 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 195.440531][T11024] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/49], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 195.720134][T11038] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:34 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/52], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/52], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:35 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200"/52], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:35 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:35 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:35 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) 22:33:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c00"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) 22:33:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:36 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c00"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) 22:33:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:36 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) [ 198.041328][T11122] __nla_validate_parse: 4 callbacks suppressed [ 198.041347][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c00"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x0, 0x6}) [ 198.221408][T11134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:36 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 198.272648][ T3173] usb 4-1: new high-speed USB device number 17 using dummy_hcd 22:33:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x0, 0x6}) 22:33:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 198.472446][ T3173] usb 4-1: device descriptor read/64, error 18 [ 198.473827][T11149] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.742450][ T3173] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.938139][ T3173] usb 4-1: device descriptor read/64, error 18 [ 199.073121][ T3173] usb usb4-port1: attempt power cycle [ 199.802615][ T3173] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 199.892526][ T3173] usb 4-1: Invalid ep0 maxpacket: 0 [ 200.043834][ T3173] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.152689][ T3173] usb 4-1: Invalid ep0 maxpacket: 0 [ 200.158214][ T3173] usb usb4-port1: unable to enumerate USB device 22:33:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x0, 0x6}) 22:33:39 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:39 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 201.069683][T11174] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x2}) 22:33:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:39 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 201.335977][T11191] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.473008][ T3173] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 201.702931][ T3173] usb 4-1: device descriptor read/64, error 18 [ 201.972329][ T3173] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 202.192574][ T3173] usb 4-1: device descriptor read/64, error 18 [ 202.312951][ T3173] usb usb4-port1: attempt power cycle [ 203.042333][ T3173] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 203.152694][ T3173] usb 4-1: Invalid ep0 maxpacket: 0 [ 203.302457][ T3173] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 203.392592][ T3173] usb 4-1: Invalid ep0 maxpacket: 0 [ 203.397938][ T3173] usb usb4-port1: unable to enumerate USB device 22:33:42 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), 0x4) 22:33:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:42 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b00000000000052e0db1400050005"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 204.476814][T11228] netem: unknown loss type 0 22:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 204.502158][T11228] netem: change failed [ 204.534988][T11233] netem: unknown loss type 0 [ 204.541165][T11233] netem: change failed [ 204.573117][ T4291] usb 4-1: new high-speed USB device number 25 using dummy_hcd 22:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 204.762429][ T4291] usb 4-1: device descriptor read/64, error 18 [ 205.052545][ T4291] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 205.242283][ T4291] usb 4-1: device descriptor read/64, error 18 [ 205.362771][ T4291] usb usb4-port1: attempt power cycle [ 206.072329][ T4291] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 206.172581][ T4291] usb 4-1: Invalid ep0 maxpacket: 0 [ 206.334528][ T4291] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 206.442443][ T4291] usb 4-1: Invalid ep0 maxpacket: 0 [ 206.447886][ T4291] usb usb4-port1: unable to enumerate USB device 22:33:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xee000, 0x0) openat$incfs(r0, 0x0, 0x80c0, 0x40) set_mempolicy(0x1, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 22:33:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:45 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:45 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 207.403191][T11258] IPVS: ftp: loaded support on port[0] = 21 22:33:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xee000, 0x0) openat$incfs(r0, 0x0, 0x80c0, 0x40) set_mempolicy(0x1, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 22:33:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) [ 207.681174][T11289] IPVS: ftp: loaded support on port[0] = 21 [ 207.712269][ T9713] usb 4-1: new high-speed USB device number 29 using dummy_hcd 22:33:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 207.898813][T11319] IPVS: ftp: loaded support on port[0] = 21 [ 207.982586][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 208.102538][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.150390][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.178565][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.212256][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 208.223477][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.234837][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 208.402577][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.411697][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.421150][ T9713] usb 4-1: Product: syz [ 208.426154][ T9713] usb 4-1: Manufacturer: syz [ 208.430794][ T9713] usb 4-1: SerialNumber: syz [ 208.932314][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 208.952489][ T9713] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 208.973172][ T9713] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 208.992616][ T9713] usbtest: probe of 4-1:1.1 failed with error -71 [ 209.005940][ T9713] usb 4-1: USB disconnect, device number 29 22:33:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:47 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 22:33:47 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) 22:33:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x0) 22:33:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:48 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:48 executing program 2: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0x400448c9, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "adcfd21a"}, 0x0, 0x0, @fd}) 22:33:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) [ 209.812269][ T7] usb 4-1: new high-speed USB device number 30 using dummy_hcd 22:33:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2041, 0x0) [ 210.072263][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 210.097425][T11412] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.192316][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.207013][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.221187][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.240684][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 210.251604][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.274370][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 210.452264][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.461448][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.470702][ T7] usb 4-1: Product: syz [ 210.475545][ T7] usb 4-1: Manufacturer: syz [ 210.480159][ T7] usb 4-1: SerialNumber: syz [ 210.982206][ T7] cdc_ncm 4-1:1.0: bind() failure [ 211.022333][ T7] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 211.042300][ T7] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 211.063979][ T7] usbtest: probe of 4-1:1.1 failed with error -71 [ 211.074191][ T7] usb 4-1: USB disconnect, device number 30 22:33:49 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0xe, 0x0, &(0x7f0000000300)) 22:33:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) 22:33:49 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2041, 0x0) 22:33:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) [ 211.514258][T11437] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:50 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0xd) 22:33:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 22:33:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2041, 0x0) 22:33:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:50 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x81) [ 211.762895][T11455] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.872265][ T9713] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 212.112307][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 212.242418][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.254311][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.266951][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.277646][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 212.289075][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.299510][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 212.493513][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.502767][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.510974][ T9713] usb 4-1: Product: syz [ 212.517427][ T9713] usb 4-1: Manufacturer: syz [ 212.523579][ T9713] usb 4-1: SerialNumber: syz [ 213.012280][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 213.032650][ T9713] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 213.068623][ T9713] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 213.092255][ T9713] usbtest: probe of 4-1:1.1 failed with error -71 [ 213.101131][ T9713] usb 4-1: USB disconnect, device number 31 22:33:51 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 22:33:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff77", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}], 0x1, 0x2041, 0x0) 22:33:51 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x81) [ 213.557921][T11489] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}], 0x1, 0x2041, 0x0) 22:33:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x81) 22:33:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 22:33:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff77", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:52 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x81) [ 213.867550][T11507] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.902065][ T9672] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 214.152279][ T9672] usb 4-1: Using ep0 maxpacket: 32 [ 214.274211][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.285246][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.295374][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.306366][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 214.316571][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.326480][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 214.492322][ T9672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.503505][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.511526][ T9672] usb 4-1: Product: syz [ 214.515945][ T9672] usb 4-1: Manufacturer: syz [ 214.520567][ T9672] usb 4-1: SerialNumber: syz [ 215.022237][ T9672] cdc_ncm 4-1:1.0: bind() failure [ 215.050346][ T9672] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 215.072194][ T9672] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 215.092299][ T9672] usbtest: probe of 4-1:1.1 failed with error -71 [ 215.101365][ T9672] usb 4-1: USB disconnect, device number 32 22:33:54 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 22:33:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}], 0x1, 0x2041, 0x0) 22:33:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff77", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x14}, 0x40) 22:33:54 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 215.551902][T11540] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2041, 0x0) 22:33:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d0104", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 22:33:54 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x185801, 0x0) 22:33:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 215.826208][T11556] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2041, 0x0) [ 215.932173][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 216.190086][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 216.311896][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.324188][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.336804][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.349365][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 216.360044][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.370499][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 216.531853][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.540994][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.549939][ T7] usb 4-1: Product: syz [ 216.554464][ T7] usb 4-1: Manufacturer: syz [ 216.559161][ T7] usb 4-1: SerialNumber: syz [ 217.062029][ T7] cdc_ncm 4-1:1.0: bind() failure [ 217.081981][ T7] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 217.101875][ T7] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 217.121815][ T7] usbtest: probe of 4-1:1.1 failed with error -71 [ 217.131041][ T7] usb 4-1: USB disconnect, device number 33 22:33:56 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, 0x0, 0x0) 22:33:56 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d0104", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2041, 0x0) [ 217.618187][T11591] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) 22:33:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d0104", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:56 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a6c526f6"}, 0x0, 0x0, @fd}) [ 217.826639][T11606] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.951658][ T3173] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 218.211517][ T3173] usb 4-1: Using ep0 maxpacket: 32 [ 218.341644][ T3173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.352644][ T3173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.363019][ T3173] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.373063][ T3173] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 218.383059][ T3173] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.393806][ T3173] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 218.581704][ T3173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.590914][ T3173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.600345][ T3173] usb 4-1: Product: syz [ 218.605298][ T3173] usb 4-1: Manufacturer: syz [ 218.610208][ T3173] usb 4-1: SerialNumber: syz [ 219.141533][ T3173] cdc_ncm 4-1:1.0: bind() failure [ 219.181528][ T3173] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 219.201710][ T3173] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 219.223110][ T3173] usbtest: probe of 4-1:1.1 failed with error -71 [ 219.232391][ T3173] usb 4-1: USB disconnect, device number 34 22:33:58 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:33:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d010400", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 22:33:58 executing program 4: socket$inet6(0xa, 0x800, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 219.690259][T11644] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:33:58 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x2c042) 22:33:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:33:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:33:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d010400", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:33:58 executing program 4: socket$inet6(0xa, 0x800, 0x9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:33:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 219.944569][T11658] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.032983][ T7] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 220.271333][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 220.391810][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.403451][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.415348][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.427431][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.437932][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.448963][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 220.611671][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.620912][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.630406][ T7] usb 4-1: Product: syz [ 220.636480][ T7] usb 4-1: Manufacturer: syz [ 220.642355][ T7] usb 4-1: SerialNumber: syz [ 221.141382][ T7] cdc_ncm 4-1:1.0: bind() failure [ 221.162252][ T7] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 221.181317][ T7] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 221.201114][ T7] usbtest: probe of 4-1:1.1 failed with error -71 [ 221.210305][ T7] usb 4-1: USB disconnect, device number 35 22:34:00 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:34:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:34:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d010400", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 22:34:00 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 22:34:00 executing program 4: socket$inet6(0xa, 0x800, 0x9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 221.664698][T11692] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 221.698242][T11694] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:34:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:34:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 22:34:00 executing program 4: socket$inet6(0xa, 0x800, 0x9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:34:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x54, 0x0) 22:34:00 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 222.020996][ T3173] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 222.290922][ T3173] usb 4-1: Using ep0 maxpacket: 32 [ 222.452550][ T3173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.463599][ T3173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.475046][ T3173] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.485667][ T3173] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.497030][ T3173] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 222.507772][ T3173] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 222.680954][ T3173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.690098][ T3173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.701298][ T3173] usb 4-1: Product: syz [ 222.705846][ T3173] usb 4-1: Manufacturer: syz [ 222.710579][ T3173] usb 4-1: SerialNumber: syz [ 223.211262][ T3173] cdc_ncm 4-1:1.0: bind() failure [ 223.241631][ T3173] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 223.260851][ T3173] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 223.281592][ T3173] usbtest: probe of 4-1:1.1 failed with error -71 [ 223.296223][ T3173] usb 4-1: USB disconnect, device number 36 22:34:02 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}}, 0x0) 22:34:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:34:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x54, 0x0) 22:34:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 22:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}}, 0x0) 22:34:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 22:34:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x54, 0x0) 22:34:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}}, 0x0) 22:34:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) [ 224.130722][ T9672] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 224.380687][ T9672] usb 4-1: Using ep0 maxpacket: 32 [ 224.501143][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.512343][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.522783][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.533115][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 224.544162][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 224.553950][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 224.720680][ T9672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.729786][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.739183][ T9672] usb 4-1: Product: syz [ 224.745306][ T9672] usb 4-1: Manufacturer: syz [ 224.749945][ T9672] usb 4-1: SerialNumber: syz [ 225.250551][ T9672] cdc_ncm 4-1:1.0: bind() failure [ 225.280786][ T9672] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 225.300692][ T9672] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 225.320754][ T9672] usbtest: probe of 4-1:1.1 failed with error -71 [ 225.342777][ T9672] usb 4-1: USB disconnect, device number 37 22:34:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 22:34:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:34:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 22:34:04 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:04 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2041, 0x0) 22:34:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 22:34:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x80001) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 22:34:04 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x2, &(0x7f0000000000)={@loopback}, 0x20) 22:34:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff770d01040080", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000b"], 0x6c}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 22:34:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 22:34:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) [ 226.130402][ T9714] usb 4-1: new high-speed USB device number 38 using dummy_hcd 22:34:04 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x8, 0x0, 0x0) [ 226.430497][ T9714] usb 4-1: Using ep0 maxpacket: 32 [ 226.580737][ T9714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.592493][ T9714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.603019][ T9714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.613621][ T9714] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.624048][ T9714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.634496][ T9714] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 226.830416][ T9714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.839502][ T9714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.847617][ T9714] usb 4-1: Product: syz [ 226.851906][ T9714] usb 4-1: Manufacturer: syz [ 226.856492][ T9714] usb 4-1: SerialNumber: syz [ 227.360289][ T9714] cdc_ncm 4-1:1.0: bind() failure [ 227.390514][ T9714] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 227.410486][ T9714] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 227.431223][ T9714] usbtest: probe of 4-1:1.1 failed with error -71 [ 227.442045][ T9714] usb 4-1: USB disconnect, device number 38 22:34:06 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:34:06 executing program 2: socketpair(0x23, 0x0, 0xffffff26, &(0x7f0000000300)) 22:34:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 22:34:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x894c, 0x0) 22:34:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'ipvlan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 22:34:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0xc0}}, 0x0) 22:34:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000ac0), 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='p', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 228.114217][T11856] x_tables: duplicate underflow at hook 3 22:34:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) [ 228.251116][ T9672] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 228.520098][ T9672] usb 4-1: Using ep0 maxpacket: 32 [ 228.641413][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.652417][ T9672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.663685][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.674990][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.685329][ T9672] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.695255][ T9672] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 228.860109][ T9672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.871523][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.879508][ T9672] usb 4-1: Product: syz [ 228.884322][ T9672] usb 4-1: Manufacturer: syz [ 228.889295][ T9672] usb 4-1: SerialNumber: syz [ 229.390166][ T9672] cdc_ncm 4-1:1.0: bind() failure [ 229.425572][ T9672] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 229.450709][ T9672] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 229.470236][ T9672] usbtest: probe of 4-1:1.1 failed with error -71 [ 229.478874][ T9672] usb 4-1: USB disconnect, device number 39 22:34:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:08 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r0, 0x1, 0x8, 0x0, &(0x7f0000000000)) 22:34:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:34:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:08 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:34:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) 22:34:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) [ 230.271009][ T9713] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 230.539685][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 230.690143][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.701232][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.713160][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.723499][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.734100][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.744558][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 230.939914][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.949159][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.957805][ T9713] usb 4-1: Product: syz [ 230.962582][ T9713] usb 4-1: Manufacturer: syz [ 230.967212][ T9713] usb 4-1: SerialNumber: syz [ 231.469859][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 231.489732][ T9713] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 231.509936][ T9713] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 231.530348][ T9713] usbtest: probe of 4-1:1.1 failed with error -71 [ 231.539012][ T9713] usb 4-1: USB disconnect, device number 40 22:34:10 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x0, 0x0, 0xc0fe}, 0x2000020c, &(0x7f00000002c0)={0x0}}, 0x0) 22:34:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:34:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:34:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 232.206561][T11950] nbd: must specify a device to reconfigure 22:34:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) [ 232.255050][T11954] nbd: must specify a device to reconfigure 22:34:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 232.369768][ T4291] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 232.629580][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 232.749690][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.760990][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.772228][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.782848][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.793632][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 232.804619][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 232.969564][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.978807][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.987251][ T4291] usb 4-1: Product: syz [ 232.991582][ T4291] usb 4-1: Manufacturer: syz [ 232.996279][ T4291] usb 4-1: SerialNumber: syz [ 233.499473][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 233.529832][ T4291] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 233.549607][ T4291] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 233.569724][ T4291] usbtest: probe of 4-1:1.1 failed with error -71 [ 233.578827][ T4291] usb 4-1: USB disconnect, device number 41 22:34:12 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xf7}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 22:34:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_NAME={0x7, 0x1, '@!\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 22:34:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 22:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:12 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:12 executing program 2: prctl$PR_GET_SPECULATION_CTRL(0x4, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 22:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 234.339228][ T4291] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 234.425016][ T9856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 234.609248][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 234.669263][ T9856] usb 1-1: Using ep0 maxpacket: 16 [ 234.729678][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.740672][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.752251][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.763008][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.774492][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.785220][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 234.796157][ T9856] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 234.969423][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.978953][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.987185][ T9856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.998075][ T9856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.008022][ T4291] usb 4-1: Product: syz [ 235.012900][ T9856] usb 1-1: Product: syz [ 235.017107][ T9856] usb 1-1: Manufacturer: syz [ 235.022778][ T4291] usb 4-1: Manufacturer: syz [ 235.027573][ T4291] usb 4-1: SerialNumber: syz [ 235.033353][ T9856] usb 1-1: SerialNumber: syz [ 235.295009][T11992] udc-core: couldn't find an available UDC or it's busy [ 235.302620][T11992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 235.353214][ T9856] usb 1-1: USB disconnect, device number 2 [ 235.539188][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 235.559238][ T4291] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 235.579351][ T4291] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 235.599298][ T4291] usbtest: probe of 4-1:1.1 failed with error -71 [ 235.607965][ T4291] usb 4-1: USB disconnect, device number 42 [ 236.109205][ T9856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 236.349009][ T9856] usb 1-1: Using ep0 maxpacket: 16 [ 236.469122][ T9856] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 236.639952][ T9856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.649276][ T9856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.657361][ T9856] usb 1-1: Product: syz [ 236.662955][ T9856] usb 1-1: Manufacturer: syz [ 236.667558][ T9856] usb 1-1: SerialNumber: syz 22:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:15 executing program 2: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x6800) 22:34:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:15 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:15 executing program 0: shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) [ 236.973517][ T9856] usb 1-1: USB disconnect, device number 3 22:34:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000005c0)={0x2, 'vlan1\x00'}) 22:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:15 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000680)={'batadv_slave_1\x00'}) 22:34:15 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40, 0x0) 22:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 237.308944][ T4291] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 237.559187][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 237.679122][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.695225][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.705314][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.715362][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.725215][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.735026][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 237.898937][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.908146][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.916334][ T4291] usb 4-1: Product: syz [ 237.920844][ T4291] usb 4-1: Manufacturer: syz [ 237.925525][ T4291] usb 4-1: SerialNumber: syz [ 238.428944][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 238.448954][ T4291] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 238.468884][ T4291] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 238.489233][ T4291] usbtest: probe of 4-1:1.1 failed with error -71 [ 238.503791][ T4291] usb 4-1: USB disconnect, device number 43 22:34:17 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x19, &(0x7f0000000000)={0xffff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 22:34:17 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x5411, 0x0) 22:34:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:17 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@ax25={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) 22:34:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "54c1454c"}}) 22:34:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x3c}}, 0x0) 22:34:17 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 239.348823][ T9714] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 239.598699][ T9714] usb 4-1: Using ep0 maxpacket: 32 [ 239.728784][ T9714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.745165][ T9714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.756335][ T9714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.767212][ T9714] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 239.777861][ T9714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.788709][ T9714] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 239.978804][ T9714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.988040][ T9714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.997769][ T9714] usb 4-1: Product: syz [ 240.002935][ T9714] usb 4-1: Manufacturer: syz [ 240.007678][ T9714] usb 4-1: SerialNumber: syz [ 240.509378][ T9714] cdc_ncm 4-1:1.0: bind() failure [ 240.558773][ T9714] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 240.589556][ T9714] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 240.608727][ T9714] usbtest: probe of 4-1:1.1 failed with error -71 [ 240.624439][ T9714] usb 4-1: USB disconnect, device number 44 22:34:19 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:19 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:19 executing program 0: prctl$PR_GET_SPECULATION_CTRL(0x39, 0x2, 0x0) 22:34:19 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x541b, 0x0) 22:34:19 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x220080, 0x0) 22:34:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:34:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 22:34:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x39, 0x0, 0x0) 22:34:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:19 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:19 executing program 1: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0285628, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "adcfd21a"}, 0x0, 0x0, @fd}) [ 241.438555][ T9704] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 241.688446][ T9704] usb 4-1: Using ep0 maxpacket: 32 [ 241.808699][ T9704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.819828][ T9704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.831875][ T9704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.843895][ T9704] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.855070][ T9704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.866189][ T9704] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 242.028622][ T9704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.037716][ T9704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.047039][ T9704] usb 4-1: Product: syz [ 242.051425][ T9704] usb 4-1: Manufacturer: syz [ 242.056034][ T9704] usb 4-1: SerialNumber: syz [ 242.558443][ T9704] cdc_ncm 4-1:1.0: bind() failure [ 242.586674][ T9704] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 242.619795][ T9704] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 242.650161][ T9704] usbtest: probe of 4-1:1.1 failed with error -71 [ 242.662745][ T9704] usb 4-1: USB disconnect, device number 45 22:34:21 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:34:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:21 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000300)) 22:34:21 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 22:34:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:34:21 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000080)={'batadv_slave_1\x00'}) 22:34:21 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:34:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:21 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 243.243253][T12205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 22:34:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 243.498119][ T4291] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 243.748097][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 243.868575][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.879784][ T4291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.891386][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.902092][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 243.912945][ T4291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.923773][ T4291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 244.088270][ T4291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.098602][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.106721][ T4291] usb 4-1: Product: syz [ 244.111156][ T4291] usb 4-1: Manufacturer: syz [ 244.115838][ T4291] usb 4-1: SerialNumber: syz [ 244.618138][ T4291] cdc_ncm 4-1:1.0: bind() failure [ 244.638311][ T4291] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 244.658247][ T4291] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 244.678476][ T4291] usbtest: probe of 4-1:1.1 failed with error -71 [ 244.687713][ T4291] usb 4-1: USB disconnect, device number 46 22:34:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:23 executing program 2: r0 = epoll_create(0x7) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) 22:34:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:23 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt(r0, 0x1, 0x22, 0x0, &(0x7f0000000180)) 22:34:23 executing program 1: socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)) 22:34:23 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:34:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:23 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "57be43e8239addb37f93ba1f4a0b98ec2ab7418b3f1124b53c3cc3cf4d75e987a6df463c7b7484d9bfbf538f4e4c4faba1edd2beb7073e4db749d07f77cfda7f"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0xfffffffffffffffa) 22:34:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 22:34:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 22:34:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), 0x10) 22:34:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}}, 0x0) 22:34:24 executing program 2: r0 = socket(0x2, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 22:34:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 245.497980][ T7] usb 4-1: new high-speed USB device number 47 using dummy_hcd 22:34:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) [ 245.769652][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 245.888159][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.899246][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.909851][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.920271][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.930727][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.941160][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 246.108106][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.117205][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.126338][ T7] usb 4-1: Product: syz [ 246.131132][ T7] usb 4-1: Manufacturer: syz [ 246.135724][ T7] usb 4-1: SerialNumber: syz [ 246.428027][ T7] cdc_ncm 4-1:1.0: bind() failure [ 246.436251][ T7] cdc_ncm 4-1:1.1: bind() failure [ 246.448077][ T7] usb 4-1: USB disconnect, device number 47 22:34:25 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:34:25 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8929, &(0x7f0000000080)={'batadv_slave_1\x00'}) 22:34:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) 22:34:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000040)) 22:34:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{}, {0x0, 0x80}}) 22:34:25 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x5}, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}}) 22:34:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "22e4237e"}}) 22:34:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000e40)={0xe}, 0x40) [ 247.339514][ T9704] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 247.590274][ T9704] usb 4-1: Using ep0 maxpacket: 32 [ 247.737901][ T9704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.749021][ T9704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.760141][ T9704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.771066][ T9704] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 247.782022][ T9704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.792828][ T9704] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 247.988575][ T9704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.997814][ T9704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.005889][ T9704] usb 4-1: Product: syz [ 248.012090][ T9704] usb 4-1: Manufacturer: syz [ 248.016798][ T9704] usb 4-1: SerialNumber: syz [ 248.318984][ T9704] cdc_ncm 4-1:1.0: bind() failure [ 248.326330][ T9704] cdc_ncm 4-1:1.1: bind() failure [ 248.349013][ T9704] usb 4-1: USB disconnect, device number 48 22:34:27 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22:34:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) 22:34:27 executing program 0: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0x5452, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "adcfd21a"}, 0x0, 0x0, @fd}) 22:34:27 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x107041, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 22:34:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8, 0x2}) 22:34:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:27 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x13, &(0x7f0000000000)={0xffff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 22:34:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 22:34:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8, 0x2}) [ 249.187710][ T9713] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 249.212570][T12365] blktrace: Concurrent blktraces are not allowed on sg0 [ 249.477524][ T9713] usb 4-1: Using ep0 maxpacket: 32 [ 249.617801][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.633678][ T9713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.644162][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.654093][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 249.663971][ T9713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.673762][ T9713] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 249.867734][ T9713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.876830][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.885461][ T9713] usb 4-1: Product: syz [ 249.890284][ T9713] usb 4-1: Manufacturer: syz [ 249.894912][ T9713] usb 4-1: SerialNumber: syz [ 250.187637][ T9713] cdc_ncm 4-1:1.0: bind() failure [ 250.195844][ T9713] cdc_ncm 4-1:1.1: bind() failure [ 250.205176][ T9713] usb 4-1: USB disconnect, device number 49 22:34:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8, 0x2}) 22:34:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:29 executing program 2: syz_io_uring_setup(0x4c44, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 22:34:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:29 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, 0x0) 22:34:29 executing program 3: syz_io_uring_setup(0x6724, &(0x7f0000000000)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 250.702666][T12384] blktrace: Concurrent blktraces are not allowed on sg0 22:34:29 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x5411, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) 22:34:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8, 0x2}) 22:34:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:29 executing program 2: syz_io_uring_setup(0x4c44, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 22:34:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000080)="7964d73ac3d92e9f2123de50ce59c29071"}) [ 250.940173][T12402] blktrace: Concurrent blktraces are not allowed on sg0 22:34:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x70, "0c3193f88f32e33e67834e77897ec3dfc3d6e76ce8a9d433419319a905c4168bc904578e38fb8669784ab04f6943f1b65b71f1bd893ab3618f8b8fe4cc662c0827304188b537cd074067932b1f9b35df3c944cfd788509c74031d2587d096b492104a899c68ae8c208463e9fb12374a4"}, &(0x7f0000000000)=0x78) 22:34:29 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x22, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x3) 22:34:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:34:29 executing program 2: syz_io_uring_setup(0x4c44, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 22:34:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 255.367918][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.374262][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.805416][ T9856] Bluetooth: hci3: command 0x0406 tx timeout [ 272.805489][ T9704] Bluetooth: hci0: command 0x0406 tx timeout [ 272.811660][ T9856] Bluetooth: hci4: command 0x0406 tx timeout [ 272.826120][ T9704] Bluetooth: hci1: command 0x0406 tx timeout [ 272.832184][ T9704] Bluetooth: hci2: command 0x0406 tx timeout [ 272.835468][ T9856] Bluetooth: hci5: command 0x0406 tx timeout [ 316.804676][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.811124][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.240361][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.246724][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.088545][ T1664] INFO: task syz-executor.3:12392 blocked for more than 143 seconds. [ 398.097155][ T1664] Not tainted 5.11.0-next-20210301-syzkaller #0 [ 398.105224][ T1664] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.123517][ T1664] task:syz-executor.3 state:D stack:28312 pid:12392 ppid: 8418 flags:0x00004004 [ 398.136920][ T1664] Call Trace: [ 398.147511][ T1664] __schedule+0x90c/0x21a0 [ 398.156000][ T1664] ? io_schedule_timeout+0x140/0x140 [ 398.169201][ T1664] ? lock_chain_count+0x20/0x20 [ 398.174338][ T1664] schedule+0xcf/0x270 [ 398.179612][ T1664] schedule_timeout+0x1db/0x250 [ 398.184660][ T1664] ? usleep_range+0x170/0x170 [ 398.189584][ T1664] ? wait_for_completion+0x160/0x270 [ 398.195465][ T1664] ? mark_held_locks+0x9f/0xe0 [ 398.201239][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.206219][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.211804][ T1664] wait_for_completion+0x168/0x270 [ 398.216975][ T1664] ? bit_wait_io_timeout+0x160/0x160 [ 398.223183][ T1664] ? do_raw_spin_lock+0x120/0x2b0 [ 398.229391][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.234474][ T1664] io_sq_thread_park+0xd5/0x130 [ 398.239886][ T1664] io_uring_cancel_task_requests+0x24c/0xd90 [ 398.247157][ T1664] ? io_openat2+0x8f0/0x8f0 [ 398.252825][ T1664] ? xa_find+0x1fb/0x320 [ 398.257772][ T1664] ? xas_find+0x7e0/0x7e0 [ 398.263773][ T1664] ? lock_is_held_type+0xd5/0x130 [ 398.269123][ T1664] ? lock_release+0x3bb/0x710 [ 398.273862][ T1664] ? kcov_task_exit+0xbb/0xf0 [ 398.282889][ T1664] ? lock_downgrade+0x6d0/0x6d0 [ 398.288747][ T1664] __io_uring_files_cancel+0x110/0x1b0 [ 398.294248][ T1664] ? __io_uring_free+0x110/0x110 [ 398.299863][ T1664] ? _raw_spin_unlock_irqrestore+0x28/0x50 [ 398.305725][ T1664] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 398.312351][ T1664] ? __validate_process_creds+0x20c/0x370 [ 398.318444][ T1664] do_exit+0x299/0x2a60 [ 398.322741][ T1664] ? lock_is_held_type+0xd5/0x130 [ 398.327806][ T1664] ? find_held_lock+0x2d/0x110 [ 398.332664][ T1664] ? mm_update_next_owner+0x7a0/0x7a0 [ 398.338143][ T1664] ? lock_release+0x3bb/0x710 [ 398.342843][ T1664] ? get_signal+0x337/0x2100 [ 398.347502][ T1664] ? lock_downgrade+0x6d0/0x6d0 [ 398.352465][ T1664] ? lock_is_held_type+0xd5/0x130 [ 398.357524][ T1664] do_group_exit+0x125/0x310 [ 398.362243][ T1664] get_signal+0x42c/0x2100 [ 398.366691][ T1664] ? futex_exit_release+0x220/0x220 [ 398.372003][ T1664] ? do_mmap+0x616/0x11d0 [ 398.376458][ T1664] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 398.382500][ T1664] ? randomize_stack_top+0x100/0x100 [ 398.387851][ T1664] ? copy_siginfo_to_user32+0xa0/0xa0 [ 398.394631][ T1664] ? __do_sys_futex+0x2a2/0x470 [ 398.400498][ T1664] ? __do_sys_futex+0x2ab/0x470 [ 398.405664][ T1664] ? do_futex+0x1710/0x1710 [ 398.410269][ T1664] exit_to_user_mode_prepare+0x148/0x250 [ 398.417076][ T1664] syscall_exit_to_user_mode+0x19/0x50 [ 398.423717][ T1664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 398.429741][ T1664] RIP: 0033:0x465ef9 [ 398.433730][ T1664] RSP: 002b:00007fe76b72f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 398.442233][ T1664] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000465ef9 [ 398.450315][ T1664] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 398.458388][ T1664] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 398.466364][ T1664] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 398.474428][ T1664] R13: 00007ffeab4e505f R14: 00007fe76b72f300 R15: 0000000000022000 [ 398.482852][ T1664] INFO: task iou-sqp-12392:12394 can't die for more than 143 seconds. [ 398.491154][ T1664] task:iou-sqp-12392 state:D stack:30296 pid:12394 ppid: 8418 flags:0x00004004 [ 398.502572][ T1664] Call Trace: [ 398.505915][ T1664] __schedule+0x90c/0x21a0 [ 398.510610][ T1664] ? io_schedule_timeout+0x140/0x140 [ 398.515940][ T1664] schedule+0xcf/0x270 [ 398.520111][ T1664] schedule_timeout+0x1db/0x250 [ 398.525274][ T1664] ? usleep_range+0x170/0x170 [ 398.530504][ T1664] ? wait_for_completion+0x160/0x270 [ 398.535818][ T1664] ? lock_downgrade+0x6d0/0x6d0 [ 398.541438][ T1664] ? do_raw_spin_lock+0x120/0x2b0 [ 398.546498][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.552031][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.557527][ T1664] wait_for_completion+0x168/0x270 [ 398.564887][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 398.570853][ T1664] ? bit_wait_io_timeout+0x160/0x160 [ 398.576177][ T1664] ? preempt_schedule_common+0x59/0xc0 [ 398.582150][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 398.587557][ T1664] ? trace_hardirqs_on+0x38/0x1c0 [ 398.593290][ T1664] io_sq_thread+0x283/0x19a0 [ 398.597919][ T1664] ? lock_is_held_type+0xd5/0x130 [ 398.604326][ T1664] ? find_held_lock+0x2d/0x110 [ 398.611250][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 398.616306][ T1664] ? lock_release+0x3bb/0x710 [ 398.621629][ T1664] ? ret_from_fork+0x8/0x30 [ 398.626171][ T1664] ? finish_wait+0x260/0x260 [ 398.631765][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.636748][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.643435][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 398.648990][ T1664] ret_from_fork+0x1f/0x30 [ 398.653446][ T1664] INFO: task iou-sqp-12392:12394 blocked for more than 143 seconds. [ 398.661932][ T1664] Not tainted 5.11.0-next-20210301-syzkaller #0 [ 398.668889][ T1664] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.677574][ T1664] task:iou-sqp-12392 state:D stack:30296 pid:12394 ppid: 8418 flags:0x00004004 [ 398.687216][ T1664] Call Trace: [ 398.690707][ T1664] __schedule+0x90c/0x21a0 [ 398.695161][ T1664] ? io_schedule_timeout+0x140/0x140 [ 398.700844][ T1664] schedule+0xcf/0x270 [ 398.705892][ T1664] schedule_timeout+0x1db/0x250 [ 398.711267][ T1664] ? usleep_range+0x170/0x170 [ 398.715972][ T1664] ? wait_for_completion+0x160/0x270 [ 398.726592][ T1664] ? lock_downgrade+0x6d0/0x6d0 [ 398.732037][ T1664] ? do_raw_spin_lock+0x120/0x2b0 [ 398.737093][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.742541][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.747878][ T1664] wait_for_completion+0x168/0x270 [ 398.753667][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 398.759753][ T1664] ? bit_wait_io_timeout+0x160/0x160 [ 398.765165][ T1664] ? preempt_schedule_common+0x59/0xc0 [ 398.771603][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 398.777000][ T1664] ? trace_hardirqs_on+0x38/0x1c0 [ 398.782532][ T1664] io_sq_thread+0x283/0x19a0 [ 398.787198][ T1664] ? lock_is_held_type+0xd5/0x130 [ 398.792839][ T1664] ? find_held_lock+0x2d/0x110 [ 398.797651][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 398.803430][ T1664] ? lock_release+0x3bb/0x710 [ 398.809339][ T1664] ? ret_from_fork+0x8/0x30 [ 398.813882][ T1664] ? finish_wait+0x260/0x260 [ 398.819142][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.824109][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.830313][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 398.835481][ T1664] ret_from_fork+0x1f/0x30 [ 398.840400][ T1664] INFO: task iou-sqp-12392:12399 can't die for more than 144 seconds. [ 398.850310][ T1664] task:iou-sqp-12392 state:D stack:30296 pid:12399 ppid: 8418 flags:0x00004004 [ 398.860081][ T1664] Call Trace: [ 398.863380][ T1664] __schedule+0x90c/0x21a0 [ 398.867883][ T1664] ? io_schedule_timeout+0x140/0x140 [ 398.874881][ T1664] schedule+0xcf/0x270 [ 398.879991][ T1664] schedule_timeout+0x1db/0x250 [ 398.884868][ T1664] ? usleep_range+0x170/0x170 [ 398.889811][ T1664] ? wait_for_completion+0x160/0x270 [ 398.895132][ T1664] ? lock_downgrade+0x6d0/0x6d0 [ 398.901038][ T1664] ? do_raw_spin_lock+0x120/0x2b0 [ 398.906096][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.912260][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.917492][ T1664] wait_for_completion+0x168/0x270 [ 398.922699][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 398.928204][ T1664] ? bit_wait_io_timeout+0x160/0x160 [ 398.933510][ T1664] ? preempt_schedule_common+0x59/0xc0 [ 398.940335][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 398.946115][ T1664] ? trace_hardirqs_on+0x38/0x1c0 [ 398.952027][ T1664] io_sq_thread+0x283/0x19a0 [ 398.956659][ T1664] ? lock_is_held_type+0xd5/0x130 [ 398.961977][ T1664] ? find_held_lock+0x2d/0x110 [ 398.966773][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 398.971979][ T1664] ? lock_release+0x3bb/0x710 [ 398.976673][ T1664] ? ret_from_fork+0x8/0x30 [ 398.981282][ T1664] ? finish_wait+0x260/0x260 [ 398.985894][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 398.990935][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 398.996153][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 399.001323][ T1664] ret_from_fork+0x1f/0x30 [ 399.005775][ T1664] INFO: task iou-sqp-12392:12399 blocked for more than 144 seconds. [ 399.014638][ T1664] Not tainted 5.11.0-next-20210301-syzkaller #0 [ 399.021482][ T1664] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.030241][ T1664] task:iou-sqp-12392 state:D stack:30296 pid:12399 ppid: 8418 flags:0x00004004 [ 399.039565][ T1664] Call Trace: [ 399.042848][ T1664] __schedule+0x90c/0x21a0 [ 399.047263][ T1664] ? io_schedule_timeout+0x140/0x140 [ 399.053887][ T1664] schedule+0xcf/0x270 [ 399.059007][ T1664] schedule_timeout+0x1db/0x250 [ 399.063897][ T1664] ? usleep_range+0x170/0x170 [ 399.069104][ T1664] ? wait_for_completion+0x160/0x270 [ 399.074509][ T1664] ? lock_downgrade+0x6d0/0x6d0 [ 399.080114][ T1664] ? do_raw_spin_lock+0x120/0x2b0 [ 399.085683][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 399.091266][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 399.096619][ T1664] wait_for_completion+0x168/0x270 [ 399.102411][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 399.109095][ T1664] ? bit_wait_io_timeout+0x160/0x160 [ 399.115027][ T1664] ? preempt_schedule_common+0x59/0xc0 [ 399.120712][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 399.126144][ T1664] ? trace_hardirqs_on+0x38/0x1c0 [ 399.132026][ T1664] io_sq_thread+0x283/0x19a0 [ 399.136852][ T1664] ? lock_is_held_type+0xd5/0x130 [ 399.143031][ T1664] ? find_held_lock+0x2d/0x110 [ 399.148052][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 399.153181][ T1664] ? lock_release+0x3bb/0x710 [ 399.157900][ T1664] ? ret_from_fork+0x8/0x30 [ 399.163220][ T1664] ? finish_wait+0x260/0x260 [ 399.167909][ T1664] ? rwlock_bug.part.0+0x90/0x90 [ 399.174524][ T1664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 399.180401][ T1664] ? io_submit_sqes+0x6320/0x6320 [ 399.185548][ T1664] ret_from_fork+0x1f/0x30 [ 399.191083][ T1664] [ 399.191083][ T1664] Showing all locks held in the system: [ 399.199642][ T1664] 1 lock held by khungtaskd/1664: [ 399.204772][ T1664] #0: ffffffff8bf741e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 399.216192][ T1664] 1 lock held by in:imklog/8110: [ 399.224029][ T1664] #0: ffff888012bb59f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 399.233597][ T1664] 1 lock held by syz-executor.3/12392: [ 399.239567][ T1664] #0: ffff88801b1c1870 (&sqd->lock){+.+.}-{3:3}, at: io_sq_thread_park+0x5d/0x130 [ 399.249229][ T1664] [ 399.251678][ T1664] ============================================= [ 399.251678][ T1664] [ 399.261215][ T1664] NMI backtrace for cpu 0 [ 399.265563][ T1664] CPU: 0 PID: 1664 Comm: khungtaskd Not tainted 5.11.0-next-20210301-syzkaller #0 [ 399.274916][ T1664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.284961][ T1664] Call Trace: [ 399.288236][ T1664] dump_stack+0xfa/0x151 [ 399.292539][ T1664] nmi_cpu_backtrace.cold+0x44/0xd7 [ 399.297729][ T1664] ? lapic_can_unplug_cpu+0x80/0x80 [ 399.302965][ T1664] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 399.308977][ T1664] watchdog+0xd8e/0xf40 [ 399.313123][ T1664] ? trace_sched_process_hang+0x280/0x280 [ 399.318835][ T1664] kthread+0x3b1/0x4a0 [ 399.322916][ T1664] ? __kthread_bind_mask+0xc0/0xc0 [ 399.328033][ T1664] ret_from_fork+0x1f/0x30 [ 399.333391][ T1664] Sending NMI from CPU 0 to CPUs 1: [ 399.339519][ C1] NMI backtrace for cpu 1 [ 399.339529][ C1] CPU: 1 PID: 3173 Comm: kworker/1:2 Not tainted 5.11.0-next-20210301-syzkaller #0 [ 399.339540][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.339551][ C1] Workqueue: events nsim_dev_trap_report_work [ 399.339562][ C1] RIP: 0010:chacha_permute+0x505/0x6f0 [ 399.339574][ C1] Code: c1 c3 07 44 03 54 24 10 45 01 d8 44 31 c3 c1 c3 10 01 f2 44 31 fe c1 c6 10 31 d0 45 31 d4 c1 c0 07 01 f7 41 c1 c4 10 41 01 c1 <31> f9 44 31 cd c1 c1 0c c1 c5 10 44 01 e2 41 01 cf 44 31 fe 89 54 [ 399.339591][ C1] RSP: 0018:ffffc900025979c0 EFLAGS: 00000087 [ 399.339602][ C1] RAX: 00000000f5999fc1 RBX: 00000000f51b6ff0 RCX: 0000000051d4c71e [ 399.339612][ C1] RDX: 000000001472f130 RSI: 000000007868f5c5 RDI: 0000000018889f3a [ 399.339621][ C1] RBP: 00000000d3009274 R08: 0000000035feaa11 R09: 00000000a57b9d0f [ 399.339630][ C1] R10: 0000000021842802 R11: 000000008845c417 R12: 000000005771e3fc [ 399.339639][ C1] R13: 00000000e378da0b R14: 000000001cf655d0 R15: 00000000ce504bf1 [ 399.339649][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 399.339658][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.339666][ C1] CR2: 00007f038f78b028 CR3: 00000000265d7000 CR4: 00000000001506e0 [ 399.339675][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.339684][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.339692][ C1] Call Trace: [ 399.339696][ C1] chacha_block_generic+0x98/0x220 [ 399.339702][ C1] ? chacha_permute+0x6f0/0x6f0 [ 399.339708][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 399.339719][ C1] _extract_crng+0x12f/0x250 [ 399.339725][ C1] _get_random_bytes+0x229/0x670 [ 399.339731][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 399.339738][ C1] ? add_disk_randomness+0x3a0/0x3a0 [ 399.339744][ C1] ? memset+0x20/0x40 [ 399.339749][ C1] ? __build_skb_around+0x23e/0x2f0 [ 399.339755][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 399.339762][ C1] ? __alloc_skb+0x17c/0x340 [ 399.339768][ C1] nsim_dev_trap_report_work+0x34c/0xbd0 [ 399.339774][ C1] process_one_work+0x98d/0x1600 [ 399.339780][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 399.339786][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 399.339792][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 399.339798][ C1] worker_thread+0x64c/0x1120 [ 399.339804][ C1] ? process_one_work+0x1600/0x1600 [ 399.339810][ C1] kthread+0x3b1/0x4a0 [ 399.339815][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 399.339821][ C1] ret_from_fork+0x1f/0x30 [ 399.342888][ T1664] Kernel panic - not syncing: hung_task: blocked tasks [ 399.595962][ T1664] CPU: 0 PID: 1664 Comm: khungtaskd Not tainted 5.11.0-next-20210301-syzkaller #0 [ 399.605250][ T1664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.615307][ T1664] Call Trace: [ 399.618581][ T1664] dump_stack+0xfa/0x151 [ 399.622854][ T1664] panic+0x306/0x73d [ 399.626780][ T1664] ? __warn_printk+0xf3/0xf3 [ 399.631390][ T1664] ? lapic_can_unplug_cpu+0x80/0x80 [ 399.636578][ T1664] ? preempt_schedule_thunk+0x16/0x18 [ 399.641965][ T1664] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 399.648123][ T1664] ? watchdog.cold+0x22d/0x248 [ 399.652934][ T1664] watchdog.cold+0x23e/0x248 [ 399.657548][ T1664] ? trace_sched_process_hang+0x280/0x280 [ 399.663262][ T1664] kthread+0x3b1/0x4a0 [ 399.667488][ T1664] ? __kthread_bind_mask+0xc0/0xc0 [ 399.672591][ T1664] ret_from_fork+0x1f/0x30 [ 399.677811][ T1664] Kernel Offset: disabled [ 399.682158][ T1664] Rebooting in 86400 seconds..