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", 0x1000}}, 0x1006) 02:02:18 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:02:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc0189436, 0x0) 02:02:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0x0, r0) 02:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0xdd) 02:02:18 executing program 2: semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x8, 0x1000}], 0x1, &(0x7f0000000140)) 02:02:18 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xe81, 0x0) 02:02:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='B', 0x1, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) 02:02:18 executing program 2: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/142) 02:02:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0x0, r0) 02:02:18 executing program 0: syz_clone(0x1b28c0000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 02:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 02:02:18 executing program 5: add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="b5", 0x1, 0xffffffffffffffff) 02:02:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0x0, r0) 02:02:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) 02:02:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)=ANY=[@ANYRESOCT]) 02:02:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8940, &(0x7f0000000500)={'wg0\x00'}) 02:02:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) [ 170.314216][ T7057] trusted_key: encrypted_key: insufficient parameters specified 02:02:18 executing program 1: semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x8}], 0x1, &(0x7f0000000140)) 02:02:18 executing program 5: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x4]) 02:02:18 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x715104) 02:02:18 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) 02:02:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001100)={&(0x7f0000001040), 0xc, &(0x7f00000010c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_FRAGMENTATION_ENABLED, @BATADV_ATTR_AP_ISOLATION_ENABLED]}, 0xffffffffffffff4b}}, 0x0) 02:02:18 executing program 5: syz_clone(0x216200, 0x0, 0x0, 0x0, 0x0, 0x0) 02:02:18 executing program 1: syz_clone(0x1001100, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 02:02:18 executing program 0: pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x8}, 0x0, 0x0, 0x0) 02:02:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000500)={'wg0\x00'}) 02:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 02:02:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x62e96c6e, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, 0x0) 02:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup3(r0, r1, 0x0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 02:02:19 executing program 0: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 02:02:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4b47, 0x0) 02:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0xf0}, 0x0) 02:02:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8993, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup3(r0, r1, 0x0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 02:02:19 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 02:02:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 4: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 02:02:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f0000000240), 0x2000024c, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 02:02:19 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2\x00', 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) 02:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup3(r0, r1, 0x0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 02:02:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8901, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40880) 02:02:19 executing program 5: unshare(0x20010000) 02:02:19 executing program 3: modify_ldt$read_default(0x2, &(0x7f0000000100)=""/241, 0xf1) 02:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup3(r0, r1, 0x0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 02:02:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x8507}, 0x0) 02:02:19 executing program 0: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)) 02:02:19 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f00000007c0)) 02:02:19 executing program 4: syz_clone(0x1b28c0000, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="fdc6bb896d8d2b39b416badd153ba03a047d0e2a5be0242500af42bb0c12146e55344e94cc03b155303fc832731009be879ab63bce8070308e3ec36c3233db231d0d51099f5df17f3c1afa97f5bcf4da0bcc5b3ca1ade42507a03972a1356424cea0aa2bf303d9d75e33869b0a08") 02:02:19 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:02:19 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 02:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0xdd) 02:02:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x82f, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 02:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0xdd) 02:02:19 executing program 5: syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) 02:02:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8940, 0x0) 02:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 02:02:19 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x22, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) 02:02:19 executing program 2: add_key(&(0x7f0000000240)='encrypted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 02:02:19 executing program 5: clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x1}, &(0x7f0000000380)={r0}, 0x0) 02:02:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0xfffffdef}}, 0x0) 02:02:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 02:02:19 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) 02:02:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5421, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8946, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8911, &(0x7f0000000500)={'wg0\x00'}) 02:02:19 executing program 1: socketpair(0xa, 0x2, 0xd81, &(0x7f00000007c0)) 02:02:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5450, 0x0) 02:02:19 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x44000080, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0xd2e6000000000000, 0x0) 02:02:19 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 02:02:20 executing program 5: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000840), &(0x7f0000000880)={0x8000}, &(0x7f00000008c0)={0x9}, 0x0) 02:02:20 executing program 1: openat$cgroup_pressure(0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x0) 02:02:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00'}) 02:02:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}) 02:02:20 executing program 4: syz_io_uring_setup(0x36a1, &(0x7f0000000240)={0x0, 0x0, 0x77}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:02:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x44000080, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0xd2e6000000000000, 0x0) 02:02:20 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 02:02:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0xb, &(0x7f0000000140)='*', 0x1) 02:02:20 executing program 3: io_setup(0x1, &(0x7f00000002c0)=0x0) io_destroy(r0) 02:02:20 executing program 1: socketpair(0x28, 0x0, 0x1, &(0x7f0000000000)) 02:02:20 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x8, 0x5) 02:02:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 02:02:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401070c9, 0x0) 02:02:20 executing program 4: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x0) io_setup(0xffff, &(0x7f00000001c0)) 02:02:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, &(0x7f0000000140)="2af0111f", 0x4) 02:02:20 executing program 3: syz_io_uring_setup(0x21be, &(0x7f0000000100), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 02:02:20 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 02:02:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x44000080, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0xd2e6000000000000, 0x0) 02:02:20 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x30300, 0x0) 02:02:20 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="eb", 0x1}], 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20000000) 02:02:20 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/schedstat\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 02:02:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, "12952b8f1583ef6b07b66c87bdf5dcaa5cebf2"}) 02:02:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'lo\x00'}) 02:02:20 executing program 5: syz_io_uring_setup(0x340d, &(0x7f0000000200), &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000b6e000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 02:02:20 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x3]}, 0x8}) 02:02:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{}, {}]}) 02:02:20 executing program 2: capget(0x0, &(0x7f00000000c0)) 02:02:21 executing program 5: getpid() timer_create(0x3, 0x0, &(0x7f0000000080)) timer_delete(0x0) 02:02:21 executing program 3: timer_create(0x8, 0x0, &(0x7f0000000180)) 02:02:21 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x44000080, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0xd2e6000000000000, 0x0) 02:02:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401870cc, 0x0) 02:02:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000340)="d8", 0x1}], 0x2}, 0x0) 02:02:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x10000fffff000}]}) 02:02:21 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x18d482) 02:02:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @rc={0x1f, @fixed}, @phonet, 0xfffe}) 02:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x1, 0x0, 0x0) 02:02:21 executing program 3: prctl$PR_SET_IO_FLUSHER(0x23, 0x0) 02:02:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 02:02:21 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 02:02:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 02:02:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x17, &(0x7f0000000140)='*', 0x1) 02:02:21 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x34d0, &(0x7f0000000100), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 02:02:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x23, 0x0, 0x0) 02:02:21 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x610040, 0x0) 02:02:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 02:02:21 executing program 0: prctl$PR_SET_IO_FLUSHER(0x24, 0x0) 02:02:21 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x9) 02:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0xc2) 02:02:21 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc3}, &(0x7f0000000840)={0x0, "c9a80b3940aeb67fa23cb34c4a790ad24fe1d6ad574a22a5550a72b78922a414f38555abc021d2a43c15f0c383cae549a6fe6d19e4b6db906229789a6dca0ee7"}, 0x48, r1) 02:02:21 executing program 3: prctl$PR_SET_IO_FLUSHER(0x7, 0x0) 02:02:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 02:02:22 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='$+}%(\x00', &(0x7f0000000080), 0x0) 02:02:22 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, {[@ssrr={0x89, 0x1b, 0x0, [@multicast1, @multicast1, @rand_addr, @multicast2, @dev, @dev]}, @lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@empty}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:02:22 executing program 5: syz_io_uring_setup(0x2b84, &(0x7f0000000240)={0x0, 0x9e76, 0x1a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 02:02:22 executing program 1: syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[], 0x0) 02:02:22 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 02:02:22 executing program 0: io_setup(0x1, &(0x7f00000002c0)=0x0) io_setup(0x2f, &(0x7f0000000040)) io_destroy(r0) 02:02:22 executing program 4: mq_open(&(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0, 0x0) 02:02:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x3, 0x0, 0x0) 02:02:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)='*', 0x1) 02:02:22 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 02:02:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401870c8, 0x0) 02:02:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5409, 0x0) ioctl$KDSIGACCEPT(r1, 0x541b, 0x20000000) 02:02:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401070ca, 0x0) 02:02:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:02:22 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002080)='/sys/block/nbd2', 0x220000, 0x0) 02:02:22 executing program 1: r0 = io_uring_setup(0x1ed9, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) 02:02:22 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f00000000c0)) 02:02:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x0, &(0x7f0000000140)="2af0111f", 0x4) 02:02:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5460, 0x0) 02:02:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, 0x0) 02:02:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x14, 0x0, 0x0) 02:02:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x16, 0x0, 0x0) 02:02:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c04, 0x0) 02:02:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 02:02:22 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000200)) 02:02:22 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:02:22 executing program 1: syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYBLOB="744291b984d90180c20000000806"], 0x0) 02:02:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x21, 0x0, 0x0) 02:02:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x8, &(0x7f0000000140)='*', 0x1) 02:02:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, &(0x7f0000000140)="2af0111f", 0x4) 02:02:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={&(0x7f0000000540), 0x628e, 0x0}, 0x0) 02:02:22 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:02:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5409, 0x0) ioctl$KDSIGACCEPT(r1, 0x40049409, 0x0) 02:02:22 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) 02:02:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x21, 0x0, 0x0) 02:02:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000140)='*', 0x1) 02:02:22 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x80000000}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 02:02:22 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:02:22 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:02:22 executing program 1: syz_io_uring_setup(0x2b84, &(0x7f0000000240)={0x0, 0x9e76, 0x1a, 0x0, 0xc7}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:02:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127d, 0x0) 02:02:22 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000000)={@dev, @dev, @void, {@mpls_mc}}, 0x0) 02:02:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc3}, &(0x7f0000000840)={0x0, "c9a80b3940aeb67fa23cb34c4a790ad24fe1d6ad574a22a5550a72b78922a414f38555abc021d2a43c15f0c383cae549a6fe6d19e4b6db906229789a6dca0ee7"}, 0x48, r1) 02:02:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401070cd, 0x0) 02:02:22 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x1f, 0x33, 0x0) 02:02:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125f, 0x0) 02:02:22 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 02:02:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, 0x0) 02:02:22 executing program 4: socketpair(0x0, 0x5bd468efd156e244, 0x0, 0x0) 02:02:22 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='!-\x00', &(0x7f00000005c0)='nl80211\x00', 0x0) 02:02:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) 02:02:22 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000440), 0x0) 02:02:22 executing program 0: prctl$PR_SET_IO_FLUSHER(0x3a, 0x0) 02:02:22 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x101) msgget$private(0x0, 0x0) msgget(0x0, 0x202) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgget$private(0x0, 0x0) 02:02:22 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 02:02:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xa0042) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 02:02:22 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000108"], 0x0) 02:02:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125d, 0x0) 02:02:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080), 0x6) 02:02:22 executing program 0: io_setup(0xfff, &(0x7f0000000000)) io_cancel(0x0, 0x0, 0x0) 02:02:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="c5", 0x1}], 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="1000000000000000000800000b000000100068"], 0x20}}], 0x1, 0x0) 02:02:22 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 02:02:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x1a, &(0x7f0000000140)="2af0111f", 0x4) 02:02:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0xa, 0x0, 0x0) 02:02:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000140)='g', 0x1, r0) 02:02:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x40049409, 0x0) 02:02:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) 02:02:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "23e328922d4c3fbbc220c03dc3b2be4640d785bd77f9748edc25ba61178050727571993b2619bfbc7fdbb7ee28c07a2e446aac8ff46791f5eab5bee6b18ca4a2", "2c08c57d9603ed31538cc5259824ee87071d9bd6bf65a3b60984e6fd985d80d1e10464dd04611c9a692916ae33d61f893ff85efa2db64c5e3cc559c937839c23", "8c80b3862db10aa35785d6b8e4ebab1786e076fc06bbabd0ccf99cee4fdaccdd"}}) 02:02:23 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x26b4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x27b1, &(0x7f0000000280), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 02:02:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127e, 0x0) 02:02:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xc, &(0x7f0000000140)="2af0111f", 0x4) 02:02:23 executing program 1: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x90000006}) 02:02:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x15, &(0x7f0000000140)="2af0111f", 0x4) [ 174.700459][ T7436] block nbd4: NBD_DISCONNECT 02:02:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="c2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 174.736492][ T7436] block nbd4: Disconnected due to user request. [ 174.756586][ T7436] block nbd4: shutting down sockets 02:02:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:23 executing program 2: syz_io_uring_setup(0x26b4, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x27b1, &(0x7f0000000280), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 02:02:23 executing program 0: add_key(&(0x7f00000006c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 02:02:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x29, &(0x7f0000000140)="2af0111fd812810c02cd6c6fc3954177", 0x10) 02:02:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:23 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x3]}, 0x8}) 02:02:23 executing program 0: add_key(&(0x7f00000006c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 02:02:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x17, 0x0, 0x0) 02:02:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x29, 0x0, 0x0) 02:02:23 executing program 0: add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 02:02:23 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x1f8) 02:02:23 executing program 2: syz_io_uring_setup(0x2b84, &(0x7f0000000240)={0x0, 0x9e76, 0x1a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) [ 174.975293][ T7467] block nbd4: NBD_DISCONNECT [ 174.999238][ T7467] block nbd4: Disconnected due to user request. [ 175.047347][ T7467] block nbd4: shutting down sockets 02:02:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:23 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 02:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5409, 0x0) ioctl$KDSIGACCEPT(r1, 0x5452, 0x100000020000000) 02:02:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5452, 0x0) [ 175.251645][ T7484] block nbd4: NBD_DISCONNECT [ 175.257316][ T7484] block nbd4: Disconnected due to user request. [ 175.263584][ T7484] block nbd4: shutting down sockets 02:02:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0xc0045878, 0x0) 02:02:24 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffff9c) 02:02:24 executing program 1: io_setup(0x1002006, &(0x7f0000000080)) 02:02:24 executing program 0: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@dev, @random="ffadf4e17ad8", @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@dev}, {@remote}, {@local}, {@broadcast}, {@multicast1}, {@multicast1}]}]}}}}}}, 0x0) 02:02:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 175.737831][ T3636] block nbd5: Receive control failed (result -32) [ 175.738641][ T7459] block nbd5: shutting down sockets 02:02:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x3, &(0x7f0000000140)="2af0111f", 0x4) 02:02:24 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) 02:02:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x79d000, 0x0) 02:02:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x14, &(0x7f0000000140)='*', 0x1) 02:02:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x18, 0x4, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x4}]}, 0x18}}, 0x0) [ 175.884828][ T7508] block nbd4: NBD_DISCONNECT [ 175.891968][ T7508] block nbd4: Disconnected due to user request. [ 175.923855][ T7508] block nbd4: shutting down sockets [ 175.949238][ T7510] block nbd5: NBD_DISCONNECT [ 175.961748][ T7510] block nbd5: Disconnected due to user request. [ 175.981464][ T7510] block nbd5: shutting down sockets 02:02:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0x3b8}}, 0x0) 02:02:24 executing program 2: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 02:02:24 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) 02:02:24 executing program 3: fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) 02:02:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x8, 0x0, 0x0) 02:02:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, &(0x7f0000000140)="2af0111fd812810c02cd6c6fc39541779c0c34f079e525869fcbc442f9c73899c14a193be37a04d69a", 0x29) 02:02:24 executing program 1: syz_emit_ethernet(0x9c, &(0x7f0000000400)=ANY=[@ANYBLOB="744291b984d90180c20000008864"], 0x0) 02:02:24 executing program 2: io_uring_setup(0x100507a, &(0x7f0000000080)) 02:02:24 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) 02:02:24 executing program 0: prctl$PR_SET_IO_FLUSHER(0xd, 0x0) [ 176.183020][ T7523] block nbd5: NBD_DISCONNECT [ 176.200634][ T7523] block nbd5: Disconnected due to user request. [ 176.220459][ T7523] block nbd5: shutting down sockets 02:02:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:02:24 executing program 1: r0 = syz_io_uring_setup(0x2ee2, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 02:02:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x31, 0x0, 0x0) 02:02:24 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 02:02:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x3, 0x0, 0x3) 02:02:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:25 executing program 1: r0 = syz_io_uring_setup(0x2ee2, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 02:02:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5451, 0x0) 02:02:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x1a, 0x0, 0x0) 02:02:25 executing program 2: r0 = io_uring_setup(0x507a, &(0x7f0000000080)) io_uring_setup(0x6f36, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 176.902523][ T3652] block nbd4: Receive control failed (result -32) [ 176.906516][ T7522] block nbd4: shutting down sockets 02:02:25 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x177d, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) 02:02:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 02:02:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:02:25 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, 0x0) 02:02:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 02:02:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') write$P9_RFLUSH(r0, 0x0, 0x0) 02:02:25 executing program 1: pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r0, 0x0, 0xffffff58) [ 177.186652][ T3636] block nbd5: Receive control failed (result -32) [ 177.198042][ T7547] block nbd5: shutting down sockets 02:02:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 02:02:26 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xc35e652e69b587f8, 0x0) 02:02:26 executing program 0: capget(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) 02:02:26 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000005c0)=[{0x0}]) 02:02:26 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x0, 0x2710}) [ 177.788451][ T3652] block nbd4: Receive control failed (result -32) [ 177.800797][ T7555] block nbd4: shutting down sockets 02:02:26 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20502, 0x0) [ 177.848520][ T7583] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 02:02:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:02:26 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000001c0)) 02:02:26 executing program 3: pipe(&(0x7f0000001540)={0xffffffffffffffff}) epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 02:02:26 executing program 1: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, r0+60000000}}, 0x0) 02:02:26 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000200), 0x0) [ 178.105412][ T3636] block nbd5: Receive control failed (result -32) [ 178.106021][ T7573] block nbd5: shutting down sockets 02:02:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:27 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000039c0), 0x8) r1 = signalfd(r0, &(0x7f0000000100), 0x8) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 02:02:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) 02:02:27 executing program 2: mq_open(&(0x7f0000000080)='S\xccb\xc0\x10\xb1\xd8\xd6J\xadN\xd5E,\xe3\x81\x1a`$4X\xb2\".\xbb\xb09\xcfU\xa7\x1e\xdf\xcd\xbe\"\xd5S\x0e\xbc\xa2\xd9\xd2\xbf\x7f\xb1UV\x9f\x8a\x8e\x9d\xfe\xf7\x13\b))\xfe\x9c\xd9\xe67{\x88`W\xab\x10N\xf3\x13\xf7\xff\x80\x1d6\x01E\x88P\xaci\x1dby\x05\x192U\xbc]\xd1\xa0rM-\x8e\xac\x037\xf6\x8a\x80\x84\x19\xd6]\x1d9\xa7\x98\xfeI\"\v\xf8\xc5\x8f\xfa\x96\xa3\xdb\xfd\xff\x1f\xc6z\x8d\xa5m\x84]|J\xd1\xa7\x02\x8d\xed\xf8\'\x8b|ni\xc5\xf6\xee\xdf\xb9J\xd6K\xfcp\x83\xe7\xc5zO\x8b\xab\x0f\xec\xf0?\xeb\xf0\xbf\xd9Q\xf6\x18\xdf\xf7\xe5\xcf\xca\xcek$\"~7\xcb\x96!\x14\xddF\\\x03\x00\xbdo\xbb\xf5\xca\xa6M\x19\xe2s\\\x94R\x8c\x1c\xe54>i<\xc0\x8a5\xa0\xbd8 R\xe9\x89\xd9\x04\\\x0f\xfcv\x91\x02\xf3E[r\x00\x10\x1a\x0f\x91\xccD\xc24PqXW\xd7\xe7\v\xa0\xb0N\x02Z?\xfe\x9e\xbfx\x03\x8b', 0x0, 0x0, 0x0) 02:02:27 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)=""/15, 0xf}], 0x1, 0x0, 0xb0}, 0x0) [ 178.709025][ T3652] block nbd4: Receive control failed (result -32) [ 178.713888][ T7585] block nbd4: shutting down sockets 02:02:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) 02:02:27 executing program 3: open$dir(&(0x7f0000000100)='./file0\x00', 0x42, 0x0) 02:02:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 02:02:27 executing program 2: r0 = epoll_create(0x1f) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 02:02:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0xffffffffffffff6d) 02:02:27 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000039c0), 0x8) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 179.003763][ T3636] block nbd5: Receive control failed (result -32) [ 179.004327][ T7600] block nbd5: shutting down sockets 02:02:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:28 executing program 1: r0 = msgget(0x3, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/157) 02:02:28 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dmi', 0x8a1c0, 0x0) 02:02:28 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x301100, 0x0) fstat(r0, &(0x7f0000000040)) 02:02:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}], 0x30}}], 0x1, 0x0) [ 179.598025][ T3652] block nbd4: Receive control failed (result -32) [ 179.607219][ T7607] block nbd4: shutting down sockets 02:02:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 02:02:28 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000039c0), 0x8) openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) 02:02:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:28 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) 02:02:28 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) connect$unix(r0, 0x0, 0xf) 02:02:28 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000039c0), 0x8) timerfd_gettime(r0, 0x0) 02:02:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs, 0x6e) [ 179.880332][ T3636] block nbd5: Receive control failed (result -32) [ 179.888937][ T7624] block nbd5: shutting down sockets 02:02:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x20000000) 02:02:28 executing program 0: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002280)='fd/3\x00') accept4(r0, 0x0, 0x0, 0x0) 02:02:28 executing program 2: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x40000200) 02:02:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:28 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20}}], 0x1, 0x0) [ 180.484003][ T3652] block nbd4: Receive control failed (result -32) [ 180.484513][ T7636] block nbd4: shutting down sockets 02:02:29 executing program 1: syz_read_part_table(0x0, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000200)="db", 0x1, 0xfffffffffffffffe}, {&(0x7f0000000300)="a3", 0x1, 0x4360}]) 02:02:29 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e) [ 180.591527][ T7663] loop1: detected capacity change from 0 to 16383 02:02:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$tcp_mem(r0, 0x0, 0x0) 02:02:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 02:02:29 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 02:02:29 executing program 1: mq_open(&(0x7f0000002900)='\x00', 0x0, 0x0, &(0x7f0000002940)) [ 180.772626][ T3636] block nbd5: Receive control failed (result -32) [ 180.774868][ T7651] block nbd5: shutting down sockets 02:02:29 executing program 1: r0 = semget(0x1, 0x0, 0x0) semctl$GETVAL(r0, 0x4, 0xc, 0x0) 02:02:29 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000200) 02:02:29 executing program 2: semget(0x1, 0x0, 0x0) r0 = semget(0x1, 0x0, 0x208) semtimedop(r0, &(0x7f0000000000)=[{}, {0x4}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 02:02:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x11d002, 0x0) 02:02:29 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LK(r0, &(0x7f0000002100)={0x28}, 0x28) 02:02:29 executing program 3: pselect6(0x40, &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x2}, &(0x7f0000000200)={0x7}, 0x0, 0x0) [ 181.409950][ T3652] block nbd4: Receive control failed (result -32) [ 181.410517][ T7665] block nbd4: shutting down sockets [ 181.509717][ T7692] block nbd4: NBD_DISCONNECT [ 181.517947][ T7692] block nbd4: Disconnected due to user request. [ 181.524342][ T7692] block nbd4: shutting down sockets 02:02:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0x5, 0x0, 0x1, [{0x11}, {0x8}]}}]}]}, 0x3c}}, 0x0) 02:02:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000ac0)={0x0, 0x0, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2f}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x0, 0x0, 0x1, 'z'}, 0x0, 0x0, 0x0, 0x0}) 02:02:30 executing program 1: r0 = socket(0x2, 0x3, 0x0) r1 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1203, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64=r0], 0x3ef) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="05", 0x1}], 0x1}, 0x0) 02:02:30 executing program 0: syz_io_uring_setup(0x66bb, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x2b95, &(0x7f0000000200), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 02:02:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 181.704971][ T3636] block nbd5: Receive control failed (result -32) [ 181.705494][ T7677] block nbd5: shutting down sockets 02:02:30 executing program 0: setgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) 02:02:30 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x0, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 02:02:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8904, 0x0) [ 181.761453][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.822717][ T7701] block nbd4: shutting down sockets 02:02:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0xbe, &(0x7f0000000380)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 02:02:30 executing program 1: syz_emit_ethernet(0x47, &(0x7f0000000300)={@random="93436205003a", @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dd30f6", 0x11, 0x2c, 0x0, @empty, @mcast2, {[@fragment={0x0, 0x0, 0x7, 0x1}], {0x0, 0x0, 0x9, 0x0, @opaque='I'}}}}}}, 0x0) [ 181.948969][ T7715] block nbd4: shutting down sockets [ 182.026625][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 182.456623][ T27] usb 4-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 182.465944][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.475765][ T27] usb 4-1: config 0 descriptor?? [ 182.528451][ T27] gspca_main: sunplus-2.14.0 probing 0733:3281 02:02:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x1}, 0x10) [ 182.610396][ T3636] block nbd5: Receive control failed (result -32) [ 182.610997][ T7710] block nbd5: shutting down sockets [ 183.509948][ T3636] block nbd5: Receive control failed (result -32) [ 183.510333][ T7724] block nbd5: shutting down sockets [ 184.696490][ T27] gspca_sunplus: reg_w_riv err -71 [ 184.701896][ T27] sunplus: probe of 4-1:0.0 failed with error -71 [ 184.711322][ T27] usb 4-1: USB disconnect, device number 2 02:02:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000ac0)={0x0, 0x0, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2f}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x0, 0x0, 0x1, 'z'}, 0x0, 0x0, 0x0, 0x0}) 02:02:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCGFLAGS1(r0, 0x80047456, &(0x7f0000001480)) 02:02:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:02:33 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x40000400, &(0x7f0000000280)="2e3a401f2582dd17c91a6ea99f9850331c0b22d8ebec48d97c207899c1bb4d57468084a244bdfbef5f9ff7ff3cef99391c62941c71c55877eb9d30b496d38baa619dff7a290c91935e617601d2e671c18dd5d328e0909bbfdbf405fbe2fba6767db039a8821311c230d819943ae1c77b6ec8fc6bd4b8ac0cacbadffab42a7865cf4b401dbaa79b3db6745f9cdbb1fd62e7555865031929a2f397b89b5d48f2f96f83dd28735f2eb9de3dfe1059d926683bec1b5cb86261bdf31bda00f81d4fefc4feb0f480f67ccfbc1b41b01e2ad593a869abaa1dd044272a08cc396b742cbba3328fc5755d1c", 0xe7, 0x0, &(0x7f00000003c0), 0x0) write$cgroup_pid(r0, &(0x7f0000000440)=r1, 0x12) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) 02:02:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 02:02:33 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) [ 185.258212][ T7729] block nbd4: shutting down sockets 02:02:33 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:33 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x40000400, &(0x7f0000000280)="2e3a401f2582dd17c91a6ea99f9850331c0b22d8ebec48d97c207899c1bb4d57468084a244bdfbef5f9ff7ff3cef99391c62941c71c55877eb9d30b496d38baa619dff7a290c91935e617601d2e671c18dd5d328e0909bbfdbf405fbe2fba6767db039a8821311c230d819943ae1c77b6ec8fc6bd4b8ac0cacbadffab42a7865cf4b401dbaa79b3db6745f9cdbb1fd62e7555865031929a2f397b89b5d48f2f96f83dd28735f2eb9de3dfe1059d926683bec1b5cb86261bdf31bda00f81d4fefc4feb0f480f67ccfbc1b41b01e2ad593a869abaa1dd044272a08cc396b742cbba3328fc5755d1c", 0xe7, 0x0, &(0x7f00000003c0), 0x0) write$cgroup_pid(r0, &(0x7f0000000440)=r1, 0x12) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) [ 185.475949][ T7747] block nbd4: NBD_DISCONNECT 02:02:33 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 185.527870][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd 02:02:34 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x23, &(0x7f0000000040)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "dbcf6fbbbf7350fd9e648c0db4d97751"}]}}) [ 185.573398][ T7750] block nbd4: NBD_DISCONNECT [ 185.626641][ T3685] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 185.901409][ T3684] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.956876][ T27] usb 4-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 185.966085][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.976233][ T27] usb 4-1: config 0 descriptor?? [ 186.019494][ T27] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 186.036499][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.047024][ T3636] block nbd5: Receive control failed (result -32) [ 186.047415][ T7734] block nbd5: shutting down sockets [ 186.059148][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.071174][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 186.090175][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.107052][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.116280][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.177612][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 186.183831][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 186.190151][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 186.201890][ T3685] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 186.208123][ T3685] cdc_wdm 2-1:1.0: Unknown control protocol [ 186.416964][ T3684] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 186.598093][ T3684] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 186.607440][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.615532][ T3684] usb 3-1: Product: syz [ 186.619789][ T3684] usb 3-1: Manufacturer: syz [ 186.624390][ T3684] usb 3-1: SerialNumber: syz [ 186.680642][ T3684] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 186.896565][ T2949] bcm5974 3-1:1.0: could not read from device [ 186.908981][ T3684] usb 3-1: USB disconnect, device number 2 [ 186.970686][ T7744] cdc_wdm 2-1:1.0: Error autopm - -16 [ 186.977130][ T3685] usb 2-1: USB disconnect, device number 2 [ 187.156614][ T3685] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.426843][ T3685] usb 2-1: Using ep0 maxpacket: 8 [ 187.566759][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.577680][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 187.587188][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.597018][ T3685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 187.606898][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 187.615939][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.668492][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 187.675537][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 187.682055][ T3685] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 187.990834][ T3685] usb 2-1: USB disconnect, device number 3 [ 188.196672][ T27] gspca_sunplus: reg_w_riv err -71 [ 188.201878][ T27] sunplus: probe of 4-1:0.0 failed with error -71 [ 188.209749][ T27] usb 4-1: USB disconnect, device number 3 02:02:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000ac0)={0x0, 0x0, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2f}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x0, 0x0, 0x1, 'z'}, 0x0, 0x0, 0x0, 0x0}) 02:02:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) 02:02:37 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000012c0)={0x0, 0x0, 0xa}) 02:02:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:02:37 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv6}}, 0x0) [ 188.727658][ T7760] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.762773][ C1] sd 0:0:1:0: [sda] tag#6398 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s 02:02:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 02:02:37 executing program 2: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) [ 188.773262][ C1] sd 0:0:1:0: [sda] tag#6398 CDB: Write(6) 0a 00 00 00 00 00 [ 188.783373][ T7765] block nbd4: NBD_DISCONNECT 02:02:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000600)="b6", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 02:02:37 executing program 2: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x8) [ 188.881358][ T7776] block nbd4: NBD_DISCONNECT [ 189.006553][ T3685] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 189.107184][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.406616][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.418156][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.427478][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 189.437469][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.447300][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.456465][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.517708][ T27] usb 4-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 189.527808][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 189.533714][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 189.539748][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.550364][ T3685] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 189.557025][ T3685] cdc_wdm 2-1:1.0: Unknown control protocol [ 189.558439][ T3636] block nbd5: Receive control failed (result -32) [ 189.563565][ T27] usb 4-1: config 0 descriptor?? [ 189.570565][ T7762] block nbd5: shutting down sockets [ 189.608977][ T27] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 190.293252][ T7764] cdc_wdm 2-1:1.0: Error autopm - -16 [ 190.293388][ T3685] usb 2-1: USB disconnect, device number 4 [ 190.476607][ T3685] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.746648][ T3685] usb 2-1: Using ep0 maxpacket: 8 [ 190.896685][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.910800][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.919897][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.929824][ T3685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 190.939721][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.949088][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.018311][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 191.024337][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 191.030891][ T3685] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 191.346851][ T3685] usb 2-1: USB disconnect, device number 5 [ 191.786618][ T27] gspca_sunplus: reg_w_riv err -71 [ 191.792007][ T27] sunplus: probe of 4-1:0.0 failed with error -71 [ 191.807782][ T27] usb 4-1: USB disconnect, device number 4 02:02:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 02:02:40 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:02:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000001840)=ANY=[@ANYBLOB="2c0000008400000002"], 0xf4}, 0x0) 02:02:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) 02:02:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200), 0x9c) 02:02:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ftruncate(r0, 0x0) [ 192.334758][ T7793] block nbd4: NBD_DISCONNECT 02:02:40 executing program 3: r0 = socket(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x90) 02:02:40 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x903, &(0x7f0000000000), 0x8) 02:02:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:40 executing program 0: open$dir(&(0x7f0000001c00)='./file0\x00', 0x2, 0x0) 02:02:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001a00)={0x10, 0x2}, 0x10) 02:02:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=0x10) [ 192.489868][ T7808] block nbd4: NBD_DISCONNECT [ 192.606427][ T3685] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 193.046582][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.060463][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.069383][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 193.079443][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.089218][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 193.098268][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.147011][ T3636] block nbd5: Receive control failed (result -32) [ 193.147514][ T7791] block nbd5: shutting down sockets [ 193.167371][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 193.174584][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 193.182511][ T3685] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 193.188747][ T3685] cdc_wdm 2-1:1.0: Unknown control protocol [ 193.588427][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.594824][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.931197][ T7792] cdc_wdm 2-1:1.0: Error autopm - -16 [ 193.933954][ T3685] usb 2-1: USB disconnect, device number 6 [ 194.106480][ T3685] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.386426][ T3685] usb 2-1: Using ep0 maxpacket: 8 [ 194.528171][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.539492][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.549655][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.559444][ T3685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 194.569661][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 194.578786][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.648830][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 194.655069][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 194.661528][ T3685] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 194.979418][ T3685] usb 2-1: USB disconnect, device number 7 02:02:43 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:02:43 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @random="8963425f5436", @val, {@ipv4}}, 0x0) 02:02:43 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="8963425f5436", @val, {@ipv4}}, 0x0) 02:02:43 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:43 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{0x0}, {&(0x7f0000001040)='n', 0x1}, {0x0}], 0x3, &(0x7f00000011c0)=[{0x10}], 0x10}, 0xc) 02:02:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:43 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000140), 0x8) 02:02:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001cc0)) 02:02:43 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 02:02:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f00000016c0)) 02:02:43 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 195.706629][ T7027] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 196.066734][ T7027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.078427][ T7027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.087560][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 196.097626][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.107818][ T7027] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 196.117271][ T7027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.167469][ T7027] hub 2-1:1.0: bad descriptor, ignoring hub [ 196.173800][ T7027] hub: probe of 2-1:1.0 failed with error -5 [ 196.186995][ T7027] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 196.193273][ T7027] cdc_wdm 2-1:1.0: Unknown control protocol [ 196.229360][ T3636] block nbd5: Receive control failed (result -32) [ 196.235571][ T7830] block nbd5: shutting down sockets [ 196.963053][ T27] usb 2-1: USB disconnect, device number 8 [ 196.963819][ T7827] cdc_wdm 2-1:1.0: Error autopm - -16 [ 197.126457][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 197.386395][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 197.556582][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.570047][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.579108][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.589068][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 197.599258][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.610014][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.659003][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 197.665376][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 197.672333][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 197.996901][ T27] usb 2-1: USB disconnect, device number 9 02:02:46 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 02:02:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 02:02:46 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100), 0x14) 02:02:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x0) 02:02:46 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fstat(r0, &(0x7f0000000500)) 02:02:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x103, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)=0xb3) 02:02:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x11, 0xffffffffffffffff) [ 198.429206][ T7852] block nbd5: NBD_DISCONNECT 02:02:46 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000002980), 0x8) [ 198.590493][ T7870] block nbd5: NBD_DISCONNECT [ 198.796620][ T3685] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 199.196660][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.206900][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.216264][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 199.226270][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.236029][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 199.245625][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.287717][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 199.293646][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 199.303300][ T3685] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 199.309406][ T3685] cdc_wdm 2-1:1.0: Unknown control protocol 02:02:52 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 02:02:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001a00)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 02:02:52 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:52 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x903, &(0x7f0000000000), 0x8) 02:02:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb) 02:02:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 203.849351][ T7858] cdc_wdm 2-1:1.0: Error autopm - -16 [ 203.856976][ T7027] usb 2-1: USB disconnect, device number 10 02:02:52 executing program 2: syz_emit_ethernet(0x18a, &(0x7f0000000000)=ANY=[@ANYBLOB="93437d3a000000000000000086dd67f81ba101543a00fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) 02:02:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffb}, 0x14) 02:02:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 203.919243][ T7879] block nbd5: NBD_DISCONNECT 02:02:52 executing program 3: symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 02:02:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$GIO_SCRNMAP(r1, 0x41006b02, 0x0) 02:02:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 204.000057][ T7894] block nbd4: NBD_DISCONNECT [ 204.067808][ T7898] block nbd5: NBD_DISCONNECT [ 204.316469][ T7027] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 204.676599][ T7027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.687132][ T7027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.696248][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 204.706180][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.716086][ T7027] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 204.725210][ T7027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.767916][ T7027] hub 2-1:1.0: bad descriptor, ignoring hub [ 204.773844][ T7027] hub: probe of 2-1:1.0 failed with error -5 [ 204.782899][ T7027] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 204.789033][ T7027] cdc_wdm 2-1:1.0: Unknown control protocol 02:02:57 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 02:02:57 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 02:02:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x20a}, 0x98) 02:02:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000180)='EO\to', 0x4) 02:02:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 209.358549][ T7887] cdc_wdm 2-1:1.0: Error autopm - -16 [ 209.358749][ T142] usb 2-1: USB disconnect, device number 11 [ 209.388959][ T7909] block nbd4: NBD_DISCONNECT 02:02:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 209.424830][ T7914] block nbd5: NBD_DISCONNECT 02:02:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x47, &(0x7f00000000c0)={@multicast1, @rand_addr, @loopback}, 0xc) 02:02:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000180)="454f096fb0d846fd136ddbf7", 0xc) 02:02:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000000540)="f08a47d4733e2c328d510d717bd31eb3052216f08437b204fc653c8cae922d4ffc4f41bf5c626e3361b8228021dea5c8bf28adda5c91a475a396d80966b70dcad8e03050cd944c300e752d42d427cbb06b291eb1ba3ae4097cf2410158f9b344bd3a4da19b30e3550f5e2509a819456298a34aa22ba368d6624438498b4eb159717d431bdced124d3b8c3e7dc8561018851690f35f6f254ebb3cc9fe7ba22012b2be14dbf59e04e0a885998091d520529aadae0da76bb0ae72b8517387b89f8f059df2d80aa97837381819880807e811ffe45256e3f03c0387bd4b3b6c", 0xdd}, {&(0x7f0000000640)="486975e2dafe3523341aac60ce3c865407f9a995241db345ba3ffbd690ebbc5a252e45bc8614e12382148c463ee3588f2b2832fbf63a23c4c1d9265084c00250d7cda4b758081a", 0x47}, {&(0x7f00000006c0)="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", 0xfbd}], 0x3, 0x0, 0x18}, 0x0) 02:02:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:02:57 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) [ 209.533011][ T7921] block nbd4: NBD_DISCONNECT [ 209.593965][ T7928] block nbd5: NBD_DISCONNECT [ 209.836724][ T142] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 210.236922][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.247113][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 210.255971][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 210.265920][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.275697][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 210.284778][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.341485][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 210.347574][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 210.355920][ T142] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 210.362074][ T142] cdc_wdm 2-1:1.0: Unknown control protocol 02:03:03 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:03 executing program 3: mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000100)=""/176) 02:03:03 executing program 0: fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x0) 02:03:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 214.899660][ T7918] cdc_wdm 2-1:1.0: Error autopm - -16 [ 214.899837][ T142] usb 2-1: USB disconnect, device number 12 02:03:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 02:03:03 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000080), &(0x7f0000000000)=0x98) [ 214.941808][ T7950] block nbd4: NBD_DISCONNECT 02:03:03 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5800) 02:03:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:03 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 215.084796][ T7967] block nbd4: NBD_DISCONNECT [ 215.366468][ T142] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 215.726641][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.741515][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.752027][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 215.762453][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.772355][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 215.781480][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.827779][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 215.834983][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 215.846983][ T142] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 215.852977][ T142] cdc_wdm 2-1:1.0: Unknown control protocol [ 216.083527][ T7974] UDC core: couldn't find an available UDC or it's busy: -16 [ 216.091208][ T7974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.136586][ T7954] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 216.177561][ T142] usb 2-1: USB disconnect, device number 13 02:03:05 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:05 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) close(r0) socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 02:03:05 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0), &(0x7f0000001700)=0x4) 02:03:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 02:03:05 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:05 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7f, 0x4) 02:03:05 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@un=@abs={0x8}, 0x8) [ 216.700011][ T7983] block nbd4: NBD_DISCONNECT 02:03:05 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:05 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:03:05 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 216.901902][ T8005] block nbd4: NBD_DISCONNECT [ 216.966647][ T142] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 217.336518][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.346752][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.355795][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 217.365869][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.376118][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.385237][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.427695][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 217.433653][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 217.447094][ T142] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 217.453105][ T142] cdc_wdm 2-1:1.0: Unknown control protocol [ 217.682561][ T8009] UDC core: couldn't find an available UDC or it's busy: -16 [ 217.690437][ T8009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 217.746944][ T7987] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 217.786799][ T142] usb 2-1: USB disconnect, device number 14 02:03:06 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000000), 0xc) 02:03:06 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockname$unix(r1, 0x0, &(0x7f00000001c0)) 02:03:06 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:06 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1}, 0x180) 02:03:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:06 executing program 3: r0 = socket(0x2, 0x10000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cdg\x00', 0x4) [ 218.279018][ T8016] block nbd4: NBD_DISCONNECT 02:03:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 218.382182][ T8028] block nbd4: NBD_DISCONNECT 02:03:06 executing program 3: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @local, @val, {@ipv6}}, 0x0) 02:03:06 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x10f282, 0x0) 02:03:06 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) [ 218.433884][ T8031] block nbd5: NBD_DISCONNECT [ 218.586414][ T14] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 218.966496][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.976831][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 218.985705][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 218.995681][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.005559][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 219.015163][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.068079][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 219.074042][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 219.082236][ T14] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 219.088268][ T14] cdc_wdm 2-1:1.0: Unknown control protocol [ 219.325408][ T8038] UDC core: couldn't find an available UDC or it's busy: -16 [ 219.333591][ T8038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.376771][ T8023] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 219.407052][ T3685] usb 2-1: USB disconnect, device number 15 02:03:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="97e313946f20cb4bffff11"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x11c000f00) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2) 02:03:08 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:08 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) 02:03:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 219.936418][ T8047] block nbd5: NBD_DISCONNECT 02:03:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:08 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) [ 219.987728][ T8040] block nbd4: shutting down sockets [ 220.004496][ T26] audit: type=1804 audit(1652234588.426:4): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1801584911/syzkaller.MuO2Bn/301/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 02:03:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 220.020019][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 220.062671][ T8054] block nbd5: NBD_DISCONNECT 02:03:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 220.131177][ T8057] block nbd4: shutting down sockets [ 220.150146][ T8061] block nbd5: NBD_DISCONNECT 02:03:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 220.174930][ T8062] block nbd2: NBD_DISCONNECT [ 220.206563][ T3685] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 220.266538][ T27] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 220.278618][ T8063] block nbd4: shutting down sockets [ 220.666728][ T3685] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.677277][ T3685] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.686210][ T3685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 220.696331][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.706532][ T3685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.716356][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.725950][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 220.736944][ T3685] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.747324][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.756353][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.769097][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.780286][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.818149][ T3685] hub 4-1:1.0: bad descriptor, ignoring hub [ 220.824204][ T3685] hub: probe of 4-1:1.0 failed with error -5 [ 220.832756][ T3685] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 220.839641][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 220.845552][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 220.852233][ T3685] cdc_wdm 4-1:1.0: Unknown control protocol [ 220.862075][ T27] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 220.868159][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 221.081623][ T8065] UDC core: couldn't find an available UDC or it's busy: -16 [ 221.089137][ T8065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 221.166828][ T8045] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 221.167886][ T3685] usb 2-1: USB disconnect, device number 16 [ 221.196943][ T14] usb 4-1: USB disconnect, device number 5 [ 221.506452][ T3685] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.756479][ T3685] usb 2-1: Using ep0 maxpacket: 8 [ 221.896511][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.907092][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.916019][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.925793][ T3685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 221.935587][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 221.944629][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.000329][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 222.006684][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 222.012946][ T3685] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 222.329212][ T3685] usb 2-1: USB disconnect, device number 17 02:03:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) [ 222.728439][ T8073] block nbd5: NBD_DISCONNECT 02:03:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 222.750749][ T8075] block nbd2: NBD_DISCONNECT [ 222.768040][ T8072] block nbd0: NBD_DISCONNECT [ 222.768458][ T8066] block nbd4: shutting down sockets 02:03:11 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 222.831733][ T8081] block nbd2: NBD_DISCONNECT [ 222.851732][ T8079] block nbd5: NBD_DISCONNECT 02:03:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 222.908918][ T8082] block nbd4: shutting down sockets [ 222.929863][ T8087] block nbd0: NBD_DISCONNECT [ 222.967629][ T8089] block nbd5: NBD_DISCONNECT [ 223.006443][ T3682] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 223.046635][ T27] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 223.376581][ T3682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.386879][ T3682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.395968][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 223.406579][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.417284][ T3682] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.426523][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.476804][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.477515][ T3682] hub 4-1:1.0: bad descriptor, ignoring hub [ 223.487254][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.498253][ T3682] hub: probe of 4-1:1.0 failed with error -5 [ 223.502373][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 223.520122][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.520711][ T3682] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 223.530001][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.545432][ T3682] cdc_wdm 4-1:1.0: Unknown control protocol [ 223.549986][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.618772][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 223.624984][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 223.632723][ T27] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 223.638935][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 223.753550][ T8090] UDC core: couldn't find an available UDC or it's busy: -16 [ 223.761124][ T8090] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 223.818297][ T8074] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 223.858269][ T27] usb 4-1: USB disconnect, device number 6 [ 223.936680][ T3685] usb 2-1: USB disconnect, device number 18 [ 224.296431][ T3682] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 224.536422][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 224.656759][ T3682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.667510][ T3682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.676479][ T3682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.686457][ T3682] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 224.696212][ T3682] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 224.705614][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.757775][ T3682] hub 2-1:1.0: bad descriptor, ignoring hub [ 224.763992][ T3682] hub: probe of 2-1:1.0 failed with error -5 [ 224.770474][ T3682] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 225.079608][ T3685] usb 2-1: USB disconnect, device number 19 02:03:13 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:13 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:13 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 225.516230][ T8097] block nbd0: NBD_DISCONNECT 02:03:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:13 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 225.538626][ T8098] block nbd5: NBD_DISCONNECT 02:03:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 225.559297][ T8094] block nbd4: shutting down sockets 02:03:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 225.615358][ T8104] block nbd0: NBD_DISCONNECT 02:03:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:14 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 225.647913][ T8106] block nbd5: NBD_DISCONNECT [ 225.698391][ T8109] block nbd4: shutting down sockets [ 225.786602][ T3682] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 225.816529][ T27] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 226.146626][ T3682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.157273][ T3682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.166138][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 226.176761][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.186579][ T3682] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.196386][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.237447][ T3682] hub 4-1:1.0: bad descriptor, ignoring hub [ 226.243359][ T3682] hub: probe of 4-1:1.0 failed with error -5 [ 226.246471][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.259390][ T3682] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 226.259408][ T3682] cdc_wdm 4-1:1.0: Unknown control protocol [ 226.277571][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.287137][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 226.298474][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.308395][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.317740][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.387545][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 226.393554][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 226.400773][ T27] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 226.406848][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 226.502005][ T8115] UDC core: couldn't find an available UDC or it's busy: -16 [ 226.509480][ T8115] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 226.567969][ T8099] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 226.607748][ T3682] usb 4-1: USB disconnect, device number 7 [ 226.717556][ T14] usb 2-1: USB disconnect, device number 20 [ 227.066527][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 227.306355][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 227.431802][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.441926][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.451146][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.461040][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 227.470874][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 227.479998][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.527328][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 227.533267][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 227.539748][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 227.847165][ T3682] usb 2-1: USB disconnect, device number 21 02:03:16 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:16 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 228.308477][ T8126] block nbd5: NBD_DISCONNECT [ 228.321354][ T8126] block nbd5: Disconnected due to user request. [ 228.336955][ T8126] block nbd5: shutting down sockets 02:03:16 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 228.354498][ T8120] block nbd4: shutting down sockets 02:03:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 228.424468][ T8137] block nbd2: NBD_DISCONNECT [ 228.460415][ T8134] block nbd5: NBD_DISCONNECT [ 228.475439][ T8134] block nbd5: Disconnected due to user request. [ 228.491982][ T8134] block nbd5: shutting down sockets [ 228.507910][ T8138] block nbd4: shutting down sockets [ 228.536376][ T3682] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 228.756445][ T14] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 228.896602][ T3682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.907017][ T3682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.916117][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 228.926034][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.935928][ T3682] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 228.945757][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.954084][ T14] usb 2-1: device descriptor read/64, error 18 [ 228.997442][ T3682] hub 4-1:1.0: bad descriptor, ignoring hub [ 229.003448][ T3682] hub: probe of 4-1:1.0 failed with error -5 [ 229.015262][ T3682] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 229.021331][ T3682] cdc_wdm 4-1:1.0: Unknown control protocol [ 229.226413][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 229.317091][ T8124] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 229.346845][ T3685] usb 4-1: USB disconnect, device number 8 [ 229.416506][ T14] usb 2-1: device descriptor read/64, error 18 [ 229.536630][ T14] usb usb2-port1: attempt power cycle [ 229.946462][ T14] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 230.116509][ T14] usb 2-1: device descriptor read/8, error -61 [ 230.386953][ T14] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 230.556691][ T14] usb 2-1: device descriptor read/8, error -61 [ 230.677415][ T14] usb usb2-port1: unable to enumerate USB device 02:03:19 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:19 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:03:19 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:19 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:19 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:19 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 231.338675][ T8143] block nbd4: shutting down sockets [ 231.347865][ T8148] block nbd5: NBD_DISCONNECT [ 231.376678][ T8148] block nbd5: Disconnected due to user request. 02:03:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:03:19 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 231.400555][ T8148] block nbd5: shutting down sockets [ 231.488730][ T8160] block nbd4: shutting down sockets [ 231.796423][ T3685] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 231.986516][ T3685] usb 2-1: device descriptor read/64, error 18 [ 232.276434][ T3685] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 232.486427][ T3685] usb 2-1: device descriptor read/64, error 18 [ 232.608631][ T3685] usb usb2-port1: attempt power cycle [ 233.026378][ T3685] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 233.196632][ T3685] usb 2-1: device descriptor read/8, error -61 [ 233.466393][ T3685] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 233.636494][ T3685] usb 2-1: device descriptor read/8, error -61 [ 233.757888][ T3685] usb usb2-port1: unable to enumerate USB device 02:03:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:22 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:22 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:03:22 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:22 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:22 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 234.399273][ T8165] block nbd4: shutting down sockets 02:03:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 234.431053][ T8179] block nbd2: NBD_DISCONNECT 02:03:22 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:22 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 234.498328][ T8182] block nbd4: shutting down sockets 02:03:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 234.533618][ T8185] block nbd2: NBD_DISCONNECT 02:03:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 234.575895][ T8187] block nbd0: NBD_DISCONNECT [ 234.628679][ T8188] block nbd4: shutting down sockets [ 234.636446][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 234.896447][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 234.901609][ T3684] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 235.056762][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.067416][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.076880][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.087148][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 235.097046][ T27] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 235.106079][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.138056][ T3684] usb 2-1: device descriptor read/64, error 18 [ 235.167631][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 235.173637][ T27] hub: probe of 4-1:1.0 failed with error -5 [ 235.180045][ T27] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 235.186917][ T3636] block nbd5: Receive control failed (result -32) [ 235.188130][ T8177] block nbd5: shutting down sockets [ 235.426550][ T3684] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 235.487542][ T14] usb 4-1: USB disconnect, device number 9 [ 235.626475][ T3684] usb 2-1: device descriptor read/64, error 18 [ 235.756712][ T3684] usb usb2-port1: attempt power cycle [ 236.166420][ T3684] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 236.346692][ T3684] usb 2-1: device descriptor read/8, error -61 [ 236.626592][ T14] Bluetooth: hci1: command 0x0406 tx timeout [ 236.632699][ T14] Bluetooth: hci2: command 0x0406 tx timeout [ 236.636391][ T3684] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 236.639416][ T14] Bluetooth: hci3: command 0x0406 tx timeout [ 236.652376][ T14] Bluetooth: hci5: command 0x0406 tx timeout [ 236.658445][ T14] Bluetooth: hci4: command 0x0406 tx timeout [ 236.664446][ T14] Bluetooth: hci0: command 0x0406 tx timeout [ 236.866753][ T3684] usb 2-1: device descriptor read/8, error -61 [ 236.998122][ T3684] usb usb2-port1: unable to enumerate USB device 02:03:25 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:03:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:25 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 237.443852][ T8196] block nbd4: shutting down sockets 02:03:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:25 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:25 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 237.579336][ T8210] block nbd4: shutting down sockets [ 237.686499][ T3715] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 237.886492][ T3684] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 237.978160][ T3715] usb 4-1: Using ep0 maxpacket: 8 [ 238.126618][ T3715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.137003][ T3715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.146022][ T3715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.155937][ T3715] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 238.166074][ T3684] usb 2-1: Using ep0 maxpacket: 8 [ 238.171447][ T3715] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 238.180583][ T3715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.231372][ T3636] block nbd5: Receive control failed (result -32) [ 238.232303][ T8199] block nbd5: shutting down sockets [ 238.239982][ T3715] hub 4-1:1.0: bad descriptor, ignoring hub [ 238.250215][ T3715] hub: probe of 4-1:1.0 failed with error -5 [ 238.257565][ T3715] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 238.307949][ T3684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.318379][ T3684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.328021][ T3684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.338094][ T3684] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 238.348204][ T3684] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 238.358078][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.417740][ T3684] hub 2-1:1.0: bad descriptor, ignoring hub [ 238.423747][ T3684] hub: probe of 2-1:1.0 failed with error -5 [ 238.430258][ T3684] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 238.569263][ T7027] usb 4-1: USB disconnect, device number 10 [ 238.737561][ T3684] usb 2-1: USB disconnect, device number 34 [ 239.096495][ T3684] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 239.346427][ T3684] usb 2-1: Using ep0 maxpacket: 8 [ 239.496645][ T3684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.507109][ T3684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.516257][ T3684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.526126][ T3684] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 239.536321][ T3684] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.545486][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.598015][ T3684] hub 2-1:1.0: bad descriptor, ignoring hub [ 239.604018][ T3684] hub: probe of 2-1:1.0 failed with error -5 [ 239.610586][ T3684] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 239.916665][ T7027] usb 2-1: USB disconnect, device number 35 02:03:28 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:28 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:28 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 240.368260][ T8221] block nbd4: shutting down sockets 02:03:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:28 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:28 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 240.526665][ T8234] block nbd4: shutting down sockets 02:03:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:29 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 240.626554][ T3684] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 240.636511][ T7027] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 240.645257][ T8245] block nbd4: shutting down sockets [ 240.896364][ T7027] usb 2-1: Using ep0 maxpacket: 8 [ 240.916478][ T3684] usb 4-1: Using ep0 maxpacket: 8 [ 241.016436][ T7027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.027274][ T7027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.036162][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.045993][ T7027] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 241.055823][ T7027] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 241.056522][ T3684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.065154][ T7027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.083570][ T3684] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.095304][ T3684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.105129][ T3684] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 241.115065][ T3684] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 241.124396][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.127763][ T7027] hub 2-1:1.0: bad descriptor, ignoring hub [ 241.141456][ T7027] hub: probe of 2-1:1.0 failed with error -5 [ 241.148578][ T7027] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 241.159197][ T3636] block nbd5: Receive control failed (result -32) 02:03:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 241.166590][ T8225] block nbd5: shutting down sockets [ 241.187451][ T3684] hub 4-1:1.0: bad descriptor, ignoring hub [ 241.193706][ T3684] hub: probe of 4-1:1.0 failed with error -5 [ 241.200441][ T3684] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 241.457628][ T7027] usb 2-1: USB disconnect, device number 36 [ 241.506753][ T142] usb 4-1: USB disconnect, device number 11 [ 241.826488][ T3684] usb 2-1: new high-speed USB device number 37 using dummy_hcd 02:03:30 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 242.051880][ T3636] block nbd5: Receive control failed (result -32) [ 242.052312][ T8250] block nbd5: shutting down sockets [ 242.078904][ T3684] usb 2-1: Using ep0 maxpacket: 8 [ 242.236674][ T3684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.247329][ T3684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.256937][ T3684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.266783][ T3684] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 242.276591][ T3684] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 242.285609][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.347618][ T3684] hub 2-1:1.0: bad descriptor, ignoring hub [ 242.353623][ T3684] hub: probe of 2-1:1.0 failed with error -5 [ 242.360719][ T3684] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 242.666703][ T3684] usb 2-1: USB disconnect, device number 37 02:03:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:31 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:31 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 243.130464][ T8258] block nbd4: shutting down sockets 02:03:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:31 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 243.269898][ T8274] block nbd4: shutting down sockets [ 243.376574][ T7027] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 243.616508][ T7027] usb 2-1: Using ep0 maxpacket: 8 [ 243.736407][ T7027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.746965][ T7027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 243.755882][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.765906][ T7027] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 243.775731][ T7027] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 243.784829][ T7027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.838619][ T7027] hub 2-1:1.0: bad descriptor, ignoring hub [ 243.844654][ T7027] hub: probe of 2-1:1.0 failed with error -5 [ 243.851269][ T7027] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 243.898664][ T3636] block nbd5: Receive control failed (result -32) [ 243.899150][ T8259] block nbd5: shutting down sockets [ 244.157790][ T7027] usb 2-1: USB disconnect, device number 38 [ 244.507111][ T7027] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 244.746380][ T7027] usb 2-1: Using ep0 maxpacket: 8 [ 244.866834][ T7027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.877161][ T7027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.886035][ T7027] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.895833][ T7027] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 244.905668][ T7027] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 244.914792][ T7027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.957442][ T7027] hub 2-1:1.0: bad descriptor, ignoring hub [ 244.963400][ T7027] hub: probe of 2-1:1.0 failed with error -5 [ 244.973709][ T7027] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 245.276735][ T7027] usb 2-1: USB disconnect, device number 39 02:03:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 245.728260][ T8279] block nbd4: shutting down sockets 02:03:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 02:03:34 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:34 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) [ 245.858271][ T8296] block nbd4: shutting down sockets 02:03:34 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) [ 245.968446][ T8302] block nbd4: shutting down sockets 02:03:34 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 246.176599][ T3715] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 246.388186][ T3715] usb 2-1: device descriptor read/64, error 18 [ 246.476408][ T7027] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 246.520728][ T3636] block nbd5: Receive control failed (result -32) [ 246.521748][ T8288] block nbd5: shutting down sockets [ 246.666410][ T7027] usb 4-1: device descriptor read/64, error 18 [ 246.666410][ T3715] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 246.876431][ T3715] usb 2-1: device descriptor read/64, error 18 [ 246.946525][ T7027] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 246.996564][ T3715] usb usb2-port1: attempt power cycle [ 247.136519][ T7027] usb 4-1: device descriptor read/64, error 18 [ 247.258860][ T7027] usb usb4-port1: attempt power cycle [ 247.416441][ T3715] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 247.646584][ T3715] usb 2-1: device descriptor read/8, error -61 [ 247.666629][ T7027] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 247.836538][ T7027] usb 4-1: device descriptor read/8, error -61 [ 247.926600][ T3715] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 248.106445][ T7027] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 248.126772][ T3715] usb 2-1: device descriptor read/8, error -61 [ 248.256646][ T3715] usb usb2-port1: unable to enumerate USB device [ 248.276582][ T7027] usb 4-1: device descriptor read/8, error -61 [ 248.397505][ T7027] usb usb4-port1: unable to enumerate USB device 02:03:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:37 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 02:03:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 02:03:37 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 02:03:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:37 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 02:03:37 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:03:37 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:03:37 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 248.783416][ T8318] nbd: must specify an index to disconnect [ 248.800198][ T8312] block nbd4: shutting down sockets 02:03:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 02:03:37 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 248.919156][ T8332] nbd: must specify an index to disconnect [ 248.931931][ T8331] block nbd4: shutting down sockets 02:03:37 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 249.236465][ T27] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 249.436618][ T27] usb 2-1: device descriptor read/64, error 18 [ 249.567517][ T8317] block nbd5: shutting down sockets [ 249.706558][ T27] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 249.714311][ T3715] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 249.926446][ T27] usb 2-1: device descriptor read/64, error 18 [ 249.933824][ T3715] usb 4-1: device descriptor read/64, error 18 [ 250.069300][ T27] usb usb2-port1: attempt power cycle [ 250.226538][ T3715] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 250.456468][ T3715] usb 4-1: device descriptor read/64, error 18 [ 250.506535][ T27] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 250.576533][ T3715] usb usb4-port1: attempt power cycle [ 250.716614][ T27] usb 2-1: device descriptor read/8, error -61 [ 251.006526][ T3715] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 251.014178][ T27] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 251.216660][ T27] usb 2-1: device descriptor read/8, error -61 [ 251.222997][ T3715] usb 4-1: device descriptor read/8, error -61 [ 251.357022][ T27] usb usb2-port1: unable to enumerate USB device [ 251.518523][ T3715] usb 4-1: new low-speed USB device number 19 using dummy_hcd 02:03:40 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:40 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:03:40 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 02:03:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 251.736583][ T3715] usb 4-1: device descriptor read/8, error -61 02:03:40 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:40 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 251.815725][ T8344] nbd: must specify an index to disconnect [ 251.854098][ T8339] block nbd4: shutting down sockets 02:03:40 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:40 executing program 4: linkat(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0xffffffffffffffff, 0x0, 0x6000) 02:03:40 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 251.871686][ T3715] usb usb4-port1: unable to enumerate USB device 02:03:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 02:03:40 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 252.276575][ T7027] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 252.466426][ T7027] usb 2-1: device descriptor read/64, error 18 [ 252.597237][ T3636] block nbd5: Receive control failed (result -32) [ 252.597688][ T8342] block nbd5: shutting down sockets [ 252.696443][ T14] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 252.736523][ T7027] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 252.886395][ T14] usb 4-1: device descriptor read/64, error 18 [ 252.926456][ T7027] usb 2-1: device descriptor read/64, error 18 [ 253.046514][ T7027] usb usb2-port1: attempt power cycle [ 253.156385][ T14] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 253.346825][ T14] usb 4-1: device descriptor read/64, error 18 [ 253.456365][ T7027] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 253.466636][ T14] usb usb4-port1: attempt power cycle [ 253.626676][ T7027] usb 2-1: device descriptor read/8, error -61 [ 253.876430][ T14] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 253.896491][ T7027] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 254.046724][ T14] usb 4-1: device descriptor read/8, error -61 [ 254.066693][ T7027] usb 2-1: device descriptor read/8, error -61 [ 254.189200][ T7027] usb usb2-port1: unable to enumerate USB device [ 254.316392][ T14] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 254.486514][ T14] usb 4-1: device descriptor read/8, error -61 [ 254.607970][ T14] usb usb4-port1: unable to enumerate USB device 02:03:43 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:43 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:43 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:43 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="68000000000000008800000007000000cf11b3b6717ba76073853f0163473ce472c3d256aec18146a4c9af985ae3c616ffb36d5940cea89da31f97f384893528bd5c3c99f55fccccc6d895403f13f575370a29fa79f029ba1cefc8c76cb992eef388fb0000000000e8"], 0x270}, 0x0) 02:03:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:43 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:43 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:03:43 executing program 4: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 02:03:43 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:43 executing program 4: syz_emit_ethernet(0xaa, 0x0, 0x0) 02:03:43 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 255.030854][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.037384][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 02:03:43 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 255.316453][ T27] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 255.516512][ T27] usb 2-1: device descriptor read/64, error 18 [ 255.648476][ T3636] block nbd5: Receive control failed (result -32) [ 255.648914][ T8367] block nbd5: shutting down sockets [ 255.716530][ T3682] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 255.798042][ T27] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 255.906505][ T3682] usb 4-1: device descriptor read/64, error 18 [ 255.986484][ T27] usb 2-1: device descriptor read/64, error 18 [ 256.106675][ T27] usb usb2-port1: attempt power cycle [ 256.176442][ T3682] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 256.366470][ T3682] usb 4-1: device descriptor read/64, error 18 [ 256.488211][ T3682] usb usb4-port1: attempt power cycle [ 256.526507][ T27] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 256.736596][ T27] usb 2-1: device descriptor read/8, error -61 [ 256.897996][ T3682] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 257.016378][ T27] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 257.066472][ T3682] usb 4-1: device descriptor read/8, error -61 [ 257.206506][ T27] usb 2-1: device descriptor read/8, error -61 [ 257.327817][ T27] usb usb2-port1: unable to enumerate USB device [ 257.336395][ T3682] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 257.506515][ T3682] usb 4-1: device descriptor read/8, error -61 [ 257.627675][ T3682] usb usb4-port1: unable to enumerate USB device 02:03:46 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:46 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 02:03:46 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:03:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000700)={0x0, 0x1}, 0x10) 02:03:46 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:46 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="02f9af699f", 0x5}, {&(0x7f0000000100)="ac6f4865e60ce126134b06a426697b28f999344cbe0f0a6c3ef6730e3b45f2b5c5a3e30b3411c97785f0e7a67bb151c56463e6759a97df9d1fe4cc52cf2cebb8e0cd3a22cd30a421c22bc3", 0x4b}, {&(0x7f0000000180)="a7c0d3d9ec6f8f0773e206c6da702c4702cc6ad6714b0e1385eccad29a278e4042c11beb3f349b72a3f942465dbff48f447f5828a546d2cbbba72a2cf8cb770851", 0x41}], 0x1000000000000205}, 0x0) 02:03:46 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:46 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:46 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 258.316678][ T27] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 258.526626][ T27] usb 2-1: device descriptor read/64, error 18 [ 258.684928][ T3636] block nbd5: Receive control failed (result -32) [ 258.685575][ T8396] block nbd5: shutting down sockets [ 258.736550][ T3682] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 258.816527][ T27] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 258.926463][ T3682] usb 4-1: device descriptor read/64, error 18 [ 259.016494][ T27] usb 2-1: device descriptor read/64, error 18 [ 259.136702][ T27] usb usb2-port1: attempt power cycle [ 259.196407][ T3682] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 259.396378][ T3682] usb 4-1: device descriptor read/64, error 18 [ 259.516702][ T3682] usb usb4-port1: attempt power cycle [ 259.566368][ T27] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 259.796468][ T27] usb 2-1: device descriptor read/8, error -61 [ 259.926437][ T3682] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 260.066496][ T27] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 260.096456][ T3682] usb 4-1: device descriptor read/8, error -61 [ 260.266525][ T27] usb 2-1: device descriptor read/8, error -61 [ 260.366448][ T3682] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 260.396812][ T27] usb usb2-port1: unable to enumerate USB device [ 260.536782][ T3682] usb 4-1: device descriptor read/8, error -61 [ 260.658097][ T3682] usb usb4-port1: unable to enumerate USB device 02:03:49 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:49 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fsync(r0) 02:03:49 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:49 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 02:03:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:03:49 executing program 4: select(0x40, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f00000000c0)={0x4}, 0x0) 02:03:49 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:03:49 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 260.913983][ T8421] nbd: must specify an index to disconnect 02:03:49 executing program 4: setrlimit(0x0, &(0x7f0000000000)) setrlimit(0x2, &(0x7f0000000080)={0x60000000, 0x60000000}) 02:03:49 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 02:03:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') [ 260.995450][ T8430] nbd: must specify an index to disconnect [ 261.057717][ T8434] nbd: must specify an index to disconnect 02:03:49 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 261.376848][ T3715] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 261.587163][ T3715] usb 2-1: device descriptor read/64, error 18 [ 261.719830][ T3636] block nbd5: Receive control failed (result -32) [ 261.720640][ T8425] block nbd5: shutting down sockets [ 261.806451][ T27] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 261.856528][ T3715] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 262.026401][ T27] usb 4-1: device descriptor read/64, error 18 [ 262.076550][ T3715] usb 2-1: device descriptor read/64, error 18 [ 262.206549][ T3715] usb usb2-port1: attempt power cycle [ 262.306615][ T27] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 262.526634][ T27] usb 4-1: device descriptor read/64, error 18 [ 262.646500][ T3715] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 262.654922][ T27] usb usb4-port1: attempt power cycle [ 262.846561][ T3715] usb 2-1: device descriptor read/8, error -61 [ 263.096542][ T27] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 263.126546][ T3715] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 263.296563][ T27] usb 4-1: device descriptor read/8, error -61 [ 263.346558][ T3715] usb 2-1: device descriptor read/8, error -61 [ 263.478151][ T3715] usb usb2-port1: unable to enumerate USB device [ 263.576511][ T27] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 263.806751][ T27] usb 4-1: device descriptor read/8, error -61 02:03:52 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:52 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 02:03:52 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 02:03:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x5) 02:03:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:03:52 executing program 4: socketpair(0xa, 0x5, 0x80000000, &(0x7f0000000000)) [ 263.929119][ T27] usb usb4-port1: unable to enumerate USB device 02:03:52 executing program 4: syz_clone(0x8009000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 02:03:52 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 263.977857][ T8445] nbd: must specify an index to disconnect [ 263.993624][ T8447] nbd: must specify an index to disconnect 02:03:52 executing program 2: syz_clone(0x6001000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:03:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'lo\x00', 0x602}) [ 264.075673][ T8455] nbd: must specify an index to disconnect 02:03:52 executing program 4: syz_clone(0x8009000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 02:03:52 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 264.406414][ T3682] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 264.596583][ T3682] usb 2-1: device descriptor read/64, error 18 [ 264.786950][ T3636] block nbd5: Receive control failed (result -32) [ 264.792793][ T8443] block nbd5: shutting down sockets [ 264.797558][ T27] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 264.876620][ T3682] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 265.066471][ T3682] usb 2-1: device descriptor read/64, error 18 [ 265.187034][ T3682] usb usb2-port1: attempt power cycle [ 265.206455][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.216858][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.225978][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.239072][ T27] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 265.248230][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.299080][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 265.305074][ T27] hub: probe of 4-1:1.0 failed with error -5 [ 265.311630][ T27] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 265.606405][ T3682] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 265.618256][ T27] usb 4-1: USB disconnect, device number 36 [ 265.776530][ T3682] usb 2-1: device descriptor read/8, error -61 [ 266.046408][ T3682] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 266.216416][ T3682] usb 2-1: device descriptor read/8, error -61 [ 266.336652][ T3682] usb usb2-port1: unable to enumerate USB device 02:03:55 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:55 executing program 2: syz_clone(0x35a23500, 0x0, 0xb1436ae7272d0fe6, 0x0, 0x0, 0x0) 02:03:55 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x682, 0x0) 02:03:55 executing program 4: syz_clone(0x8009000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 02:03:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:03:55 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x61) 02:03:55 executing program 4: syz_clone(0x8009000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 02:03:55 executing program 2: syz_clone(0x24241000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:03:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, 0x0) 02:03:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xac}, 0x0) 02:03:55 executing program 2: syz_clone(0x15a07500, 0x0, 0xfffffffffffffcce, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) [ 267.266761][ T142] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 267.446523][ T3682] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 267.626479][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.636847][ T3682] usb 2-1: device descriptor read/64, error 18 [ 267.643078][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.653411][ T142] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.666661][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 267.675717][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.718096][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 267.724167][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 267.731527][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 267.822327][ T3636] block nbd5: Receive control failed (result -32) [ 267.823643][ T8480] block nbd5: shutting down sockets [ 267.906618][ T3682] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 268.036879][ T3684] usb 4-1: USB disconnect, device number 37 [ 268.096535][ T3682] usb 2-1: device descriptor read/64, error 18 [ 268.216950][ T3682] usb usb2-port1: attempt power cycle [ 268.626544][ T3682] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 268.796571][ T3682] usb 2-1: device descriptor read/8, error -61 [ 269.076438][ T3682] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 269.257444][ T3682] usb 2-1: device descriptor read/8, error -61 [ 269.376693][ T3682] usb usb2-port1: unable to enumerate USB device 02:03:58 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:03:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x4800}]}}, &(0x7f0000000140)=""/218, 0x26, 0xda, 0x1}, 0x20) 02:03:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 02:03:58 executing program 2: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc860debfe950ad2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 02:03:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:03:58 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:03:58 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000034c0)={0x0, 0x80000001}) 02:03:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x8c}, 0x98) 02:03:58 executing program 2: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x101040}, 0x18) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0096616, 0x0) 02:03:58 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000580)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1f}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:03:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 02:03:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007340)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="07ca", 0x2}], 0x1}}, {{&(0x7f00000003c0)=@tipc=@id, 0x80, 0x0}}], 0x2, 0x0) [ 270.252084][ T8525] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 270.317659][ T3684] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 270.516421][ T27] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 270.696468][ T3684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.706998][ T3684] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.716016][ T3684] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.729472][ T27] usb 2-1: device descriptor read/64, error 18 [ 270.736442][ T3684] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 270.745654][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.799993][ T3684] hub 4-1:1.0: bad descriptor, ignoring hub [ 270.806188][ T3684] hub: probe of 4-1:1.0 failed with error -5 [ 270.812812][ T3684] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 270.877832][ T3636] block nbd5: Receive control failed (result -32) [ 270.884947][ T8505] block nbd5: shutting down sockets [ 271.016563][ T27] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 271.118195][ T3682] usb 4-1: USB disconnect, device number 38 [ 271.216441][ T27] usb 2-1: device descriptor read/64, error 18 [ 271.338840][ T27] usb usb2-port1: attempt power cycle [ 271.776622][ T27] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 271.976575][ T27] usb 2-1: device descriptor read/8, error -61 [ 272.266366][ T27] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 272.476959][ T27] usb 2-1: device descriptor read/8, error -61 [ 272.599982][ T27] usb usb2-port1: unable to enumerate USB device 02:04:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03057bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097514a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 02:04:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:04:01 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)='^', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="95", 0x1}, {&(0x7f0000000700)="c5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000940)="93", 0x1}, {&(0x7f0000000980)="8b", 0x1}, {&(0x7f00000009c0)="83", 0x1}, {&(0x7f0000000a00)='>', 0x1}, {&(0x7f0000000a40)='\"', 0x1}, {&(0x7f0000000b00)="01", 0x1}, {&(0x7f0000000b80)="3c8fd92cada1cce30761a2c2e7fab87d821d4edeb31ae6f37c5fab94ad9bb984526b3c9952b540eb649f8b9bdafa70a65888b8518aac695b36028b4380e8cb7d1a69210e34d30ef06d8faf862c39baec5c7176c42e726cf86eb8bc9031dc7f51a14269435170d1cecf13b1e0a7cc4ace193f52d2b9c70a53d5773f36dc238958701bd45c3356dc1df8afee7c5191706ba2ddd530a88143bb29471d1294fc025f35c08da6b7f34a233fe9259d8d43276afe3dbacde04faf5ca6c3900ec2912605b2d278c1bbebe52d3ffac57a3b83caa5e4cd0108cdb823c78b317679940b3a9d47dabe5def353dc106123ccfe2fb35a8fb362a3db2ecd57d0a6e31aa30e74b1416251a6a0137c3a5e2d555dfa734b093eab12c3fab2f7dda931a302df43aa1769f5145fe5a2086b531157794356950dd8af28790cfe96e50982ae07daaffd0a087e41d432df7d803e5b6139d3dd25de6fea806993ac9d2aa6594bb4ae1c0cc9c6abc75d12e63c4f16b51da684c5f252f0748a7aab69b5ef4259e124ee23f0f4efccea5a0ccd0e08778423535b6f0a2bb564479f89561a10cdbcefb71d214a463ebf23829e596762eb40bdd13ea77d01406baba18aa09d8260dc5131bd1fe14d941c91d4db5c8301623ec3326e3a38d70238701c789dc27dafa2894a0e25dc046a6e8920f6a50d1ac346f616824522cc1a76c2517d8d95de8bf01f39addc188e7fd1981c1359689e36884f1dab4324c50170430d4fe04505755daba5d9a2d8f954c9f21a1e60968e5941889b1f66c2e585bc302cb8c9c8c344b5dd71cff52cbf98673edf1dc758a94ff09865a0e55ca05589dd410a4171e89802e285235e4939975d7d5b33a06add90c0857a2459a3e4fbab89b29ec1556415016e6870306e3779b43e1f960f687c393b13aed4852e668d7b4202f4d352c17890386b51d826dbd247852aecca4520f9c8b5528aa8c0001d562b6669b518ee4e6719c0fef6ac8715770fe0b897bd7a839bfa5bae81ccc2e18949cd715c01c058d6323104a6cfbfe8bf7e4351e65f91f8ae9a5e63253c863247b183a91ae0bfaf45182f66527b162823412dd0b23fd9cd2e59f81dd052c8625b8e66110e5f330a7f893b46cda38fe2290c6ebbfe43190511a54f5e065d373624da7ee5a09d0f4160b921ebd300975321920f100ca5e9247882cb91734fbc62fb1b0a0deb1f3940231b4b7425a69e02a7308d64867bd015ed60dcf87e6787e4ba21780e3b8e040f43c354bdde710dda1ffb6f64972ca8857c7aa1cf153e46d6a22d4b1e3ce471fed742fe4ec19f36d4df4f84e26263812cd9da1c4887b686c652b118c789f4fb7a458d537e977296bbe4a34e4c96043f936c0d9e86e149ad0b9ff1ab5a7e770fd464c0d88faf86ac8fdbd3568a8f5479448c299da00ec28524205f07a97bf72d4ed855a77fbd6b6b4555ca5fed007dcc006d2656d6d353cb81d3d4dbce7e4490b61e500717ff2df6e5043059c2a40fb171ddb1f7657f94b5c8624574fc8e6be2cb9e6bb3753a0ab795bf45c123f2bb604637873b670eaf2b0e25831f9cb5db21d943a220a7a9f1cf8e0b072e63667955c19f40c69e98faa81e55b4706da98bf12db1833a8fc167bc41d", 0x481}], 0x7, &(0x7f0000005580)=ANY=[@ANYBLOB='t'], 0x78}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001d00)="8f", 0x1}, {&(0x7f0000001d80)="85", 0x1}, {&(0x7f0000001e80)="d3", 0x1}, {&(0x7f0000001f40)='#', 0x1}, {&(0x7f0000001fc0)="74810dadde772c2f7ac5192271e6a3f8a8958e8609bec14df44ecd0acd17dbf6d52bfafd62e07200e1826ec4470226f01893f09bc1776f55a662c3be65258c3816", 0x41}], 0x5}}], 0x5, 0x60cd814) 02:04:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendto(r0, 0x0, 0x0, 0x20101, 0x0, 0x0) 02:04:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18410000ffffffff"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:01 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) [ 273.366487][ T14] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 273.586539][ T27] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 273.726541][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.737311][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 273.746740][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.759941][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 273.769387][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.817949][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 273.824538][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 273.831177][ T14] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 273.931279][ T3636] block nbd5: Receive control failed (result -32) [ 273.938493][ T8535] block nbd5: shutting down sockets [ 273.996829][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.008633][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.018700][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.032223][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.042929][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.098248][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 274.104735][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 274.111829][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 274.136488][ T14] usb 4-1: USB disconnect, device number 39 [ 274.417547][ T27] usb 2-1: USB disconnect, device number 76 [ 274.786552][ T27] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 275.036490][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 275.156469][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.166687][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 275.175556][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.188544][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 275.197618][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.259911][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 275.265834][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 275.272269][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 275.578079][ T3682] usb 2-1: USB disconnect, device number 77 02:04:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:04 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:04 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/77, 0x4d}, 0x40) 02:04:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)='^', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="95", 0x1}, {&(0x7f0000000700)="c5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000940)="93", 0x1}, {&(0x7f0000000980)="8b", 0x1}, {&(0x7f00000009c0)="83", 0x1}, {&(0x7f0000000a00)='>', 0x1}, {&(0x7f0000000a40)='\"', 0x1}, {&(0x7f0000000b00)="01", 0x1}, {&(0x7f0000000b80)="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", 0x481}], 0x7, &(0x7f0000005580)=ANY=[@ANYBLOB='t'], 0x78}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001d00)="8f", 0x1}, {&(0x7f0000001d80)="85", 0x1}, {&(0x7f0000001e80)="d3", 0x1}, {&(0x7f0000001f40)='#', 0x1}, {&(0x7f0000001fc0)="74810dadde772c2f7ac5192271e6a3f8a8958e8609bec14df44ecd0acd17dbf6d52bfafd62e07200e1826ec4470226f01893f09bc1776f55a662c3be65258c3816", 0x41}], 0x5}}], 0x5, 0x60cd814) 02:04:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:04:04 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:04 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) close(r0) 02:04:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@base={0x18, 0x0, 0x0, 0xf51, 0x1}, 0x48) 02:04:04 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "070902", 0x3, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:04:04 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) [ 276.276399][ T27] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 276.316438][ T3682] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 276.676484][ T3682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.686985][ T3682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.695946][ T3682] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.709124][ T3682] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 276.716568][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.718348][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.734446][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.745638][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.763467][ T27] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 276.773013][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.789554][ T3682] hub 2-1:1.0: bad descriptor, ignoring hub [ 276.795679][ T3682] hub: probe of 2-1:1.0 failed with error -5 [ 276.802661][ T3682] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 276.820466][ T3636] block nbd5: Receive control failed (result -32) [ 276.827508][ T8560] block nbd5: shutting down sockets [ 276.837229][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 276.843329][ T27] hub: probe of 4-1:1.0 failed with error -5 [ 276.853879][ T27] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 277.107693][ T3682] usb 2-1: USB disconnect, device number 78 [ 277.156921][ T14] usb 4-1: USB disconnect, device number 40 [ 277.456500][ T14] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 277.696417][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 277.818249][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.828860][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.838143][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.851152][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.860246][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.907851][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 277.913821][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 277.920450][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 278.227752][ T142] usb 2-1: USB disconnect, device number 79 02:04:07 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:07 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f1", 0x1, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:07 executing program 2: socket$inet(0x2, 0x3, 0x89) 02:04:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000480)={'full', 0x20, 0x1f}, 0x2f) syz_clone(0x40000000, &(0x7f0000000540), 0x0, 0x0, 0x0, &(0x7f0000000240)) 02:04:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:04:07 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={0x0, &(0x7f0000000380)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 02:04:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x14810, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "ff"}]}}, &(0x7f0000000280)=""/175, 0x2a, 0xaf, 0x1}, 0x20) 02:04:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003bc0)={0x0, 0x3, &(0x7f0000001c40)=@raw=[@exit, @map_fd], &(0x7f0000003a00)='syzkaller\x00', 0x0, 0x8c, &(0x7f0000001b80)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=[0xffffffffffffffff]}, 0xbe) [ 278.916451][ T6] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 278.956430][ T142] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 279.291000][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.301596][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 279.310654][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.324052][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.334413][ T6] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 279.343553][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 279.352568][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.360676][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.375039][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 279.384191][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.407846][ T6] hub 4-1:1.0: bad descriptor, ignoring hub [ 279.413832][ T6] hub: probe of 4-1:1.0 failed with error -5 [ 279.420353][ T6] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 279.428408][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 279.434325][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 279.442728][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 279.467980][ T3636] block nbd5: Receive control failed (result -32) [ 279.468407][ T8585] block nbd5: shutting down sockets [ 279.726751][ T3684] usb 4-1: USB disconnect, device number 41 [ 279.748267][ T27] usb 2-1: USB disconnect, device number 80 [ 280.096511][ T142] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 280.336376][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 280.456583][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.466966][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.477111][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.490417][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 280.499611][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.552667][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 280.561853][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 280.568356][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 280.868693][ T142] usb 2-1: USB disconnect, device number 81 02:04:09 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 02:04:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 02:04:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000280)=""/175, 0x26, 0xaf, 0x1}, 0x20) 02:04:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:04:09 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 02:04:09 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='.\x00'}, 0x10) 02:04:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x14810, 0x0, 0x0) 02:04:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/4096, 0x27, 0x1000, 0x1}, 0x20) 02:04:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x14810, 0x0, 0x0) 02:04:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000900)=""/237, 0x2f, 0xed, 0x1}, 0x20) [ 281.536639][ T142] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 281.606531][ T27] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 281.896458][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.906823][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.915704][ T142] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.928680][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 281.937832][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.988068][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 281.994010][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 282.000612][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 282.016602][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.026957][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.035934][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.049713][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 282.059982][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.112995][ T3636] block nbd5: Receive control failed (result -32) [ 282.114095][ T8611] block nbd5: shutting down sockets [ 282.126676][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 282.132607][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 282.147820][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 282.306859][ T27] usb 4-1: USB disconnect, device number 42 [ 282.447985][ T27] usb 2-1: USB disconnect, device number 82 [ 282.826585][ T27] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 283.106408][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 283.246719][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.256968][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.265830][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.278770][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 283.287836][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.357657][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 283.363846][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 283.370408][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 283.677195][ T142] usb 2-1: USB disconnect, device number 83 02:04:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:12 executing program 4: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000500)={'macvtap0\x00'}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffffffffffe68) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:04:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x2}]}}, &(0x7f0000000280)=""/175, 0x26, 0xaf, 0x1}, 0x20) 02:04:12 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x14810, 0x0, 0x0) 02:04:12 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x400, 0x1}, 0x48) 02:04:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000200)=""/228, 0x2e, 0xe4, 0x1}, 0x20) 02:04:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)=ANY=[], 0xc8}, 0x0) 02:04:12 executing program 4: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000500)={'macvtap0\x00'}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffffffffffe68) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:04:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x10140) 02:04:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) [ 284.386654][ T27] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 284.393962][ T142] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 284.756579][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.771333][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.780468][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.793954][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 284.803099][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.811241][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.822074][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.831327][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.844741][ T27] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 284.854360][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.857405][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 284.874973][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 284.881552][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 284.897210][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 284.904558][ T27] hub: probe of 4-1:1.0 failed with error -5 [ 284.913843][ T27] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 284.928334][ T3636] block nbd5: Receive control failed (result -32) [ 284.936029][ T8636] block nbd5: shutting down sockets [ 285.176732][ T3715] usb 2-1: USB disconnect, device number 84 [ 285.217426][ T142] usb 4-1: USB disconnect, device number 43 [ 285.556421][ T3715] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 285.806631][ T3715] usb 2-1: Using ep0 maxpacket: 8 [ 285.956604][ T3715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.967201][ T3715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 285.976157][ T3715] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.995238][ T3715] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 286.004379][ T3715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.048863][ T3715] hub 2-1:1.0: bad descriptor, ignoring hub [ 286.054836][ T3715] hub: probe of 2-1:1.0 failed with error -5 [ 286.061361][ T3715] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 286.368511][ T142] usb 2-1: USB disconnect, device number 85 02:04:15 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0xc, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/228, 0x1a, 0xe4, 0x1}, 0x20) 02:04:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) close(r0) 02:04:15 executing program 4: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000500)={'macvtap0\x00'}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffffffffffe68) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:04:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:15 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:15 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x8, 0x9, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:04:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x80000000, 0x1}, 0x48) 02:04:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000300)=""/147, 0x26, 0x93, 0x1}, 0x20) 02:04:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xa, 0x0, [{}]}]}}, &(0x7f0000000200)=""/228, 0x2e, 0xe4, 0x1}, 0x20) 02:04:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'rose0\x00', 0x1}) 02:04:15 executing program 0: syz_clone(0x3106080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 287.036519][ T6] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 287.066426][ T142] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 287.396462][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.413823][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 287.422779][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.436078][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.446258][ T6] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 287.455370][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.463568][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 287.472602][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.487912][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 287.497068][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.527848][ T6] hub 4-1:1.0: bad descriptor, ignoring hub [ 287.533889][ T6] hub: probe of 4-1:1.0 failed with error -5 [ 287.541005][ T6] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 287.548628][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 287.554582][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 287.563020][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 287.613779][ T3636] block nbd5: Receive control failed (result -32) [ 287.614713][ T8662] block nbd5: shutting down sockets [ 287.857714][ T142] usb 4-1: USB disconnect, device number 44 [ 287.866854][ T3684] usb 2-1: USB disconnect, device number 86 [ 288.216504][ T142] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 288.456362][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 288.576580][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.587076][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.596919][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.609837][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.619003][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.667512][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 288.673470][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 288.683570][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 289.007134][ T3684] usb 2-1: USB disconnect, device number 87 02:04:17 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:17 executing program 4: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000500)={'macvtap0\x00'}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffffffffffe68) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:04:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=""/164, 0x1000000, 0xa4, 0x1}, 0x20) 02:04:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) 02:04:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:17 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/228, 0x38, 0xe4, 0x1}, 0x20) 02:04:17 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x20, &(0x7f0000000240)={&(0x7f00000000c0)=""/190, 0xbe, 0x0, 0x0}}, 0x10) 02:04:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/228, 0x38, 0xe4, 0x1}, 0x20) 02:04:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb090018"], &(0x7f0000000300)=""/164, 0x93, 0xa4, 0x1}, 0x20) 02:04:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x6000000}]}]}}, &(0x7f00000001c0)=""/140, 0x3e, 0x8c, 0x1}, 0x20) 02:04:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/228, 0x38, 0xe4, 0x1}, 0x20) [ 289.676589][ T14] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 289.726772][ T142] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 290.036589][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.047315][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.056469][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.070072][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 290.080348][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.089042][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.099726][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.111346][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.124364][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 290.133683][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.147293][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 290.153254][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 290.160042][ T14] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 290.183727][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 290.189796][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 290.196090][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 290.250586][ T3636] block nbd5: Receive control failed (result -32) [ 290.260809][ T8690] block nbd5: shutting down sockets [ 290.466723][ T3715] usb 4-1: USB disconnect, device number 45 [ 290.498934][ T27] usb 2-1: USB disconnect, device number 88 [ 290.866377][ T27] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 291.136402][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 291.286499][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.297161][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.306706][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.319822][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 291.328879][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.387747][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 291.393681][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 291.400074][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 291.706589][ T27] usb 2-1: USB disconnect, device number 89 02:04:20 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/228, 0x38, 0xe4, 0x1}, 0x20) 02:04:20 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f3", 0x1}], 0x1, 0x0, 0x803e}, 0x0) 02:04:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 02:04:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:20 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) ioctl$TUNSETVNETBE(r0, 0x401054d6, 0x0) 02:04:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x2, 0x0, 0x0, [{}]}]}}, &(0x7f00000001c0)=""/140, 0x32, 0x8c, 0x1}, 0x20) 02:04:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) 02:04:20 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r0, &(0x7f0000001240), 0x3) 02:04:20 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000200)) 02:04:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="163412190be645c31e3d45c8d8bfc5382e9818adb9fa6379ecfcdcec1783724a70707ff6f5f65120f36b052451d058ab9ad9e65b06edc05f2dd695de29b730455f7ecd480e2a68f31dad501a7fdc55a57df0ae75101ffadceb0224075414fdf45284d40a0e95fb1fc28e6af450db890e1e83f4b5ce8eac5d51cc5345fd98a79966350969743e9e466e1d1fbc72520069fd", 0x91, 0x0, 0x0, 0x0) [ 292.396697][ T3684] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 292.416480][ T14] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 292.786564][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.801480][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.806405][ T3684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.810723][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.821217][ T3684] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.839835][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 292.843277][ T3684] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.864641][ T3684] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 292.874499][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.883820][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.928644][ T3684] hub 4-1:1.0: bad descriptor, ignoring hub [ 292.934689][ T3684] hub: probe of 4-1:1.0 failed with error -5 [ 292.937712][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 292.947186][ T3684] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 292.954156][ T3636] block nbd5: Receive control failed (result -32) [ 292.955212][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 292.961129][ T8722] block nbd5: shutting down sockets [ 292.973515][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 293.246567][ T142] usb 4-1: USB disconnect, device number 46 [ 293.257273][ T3715] usb 2-1: USB disconnect, device number 90 [ 293.626386][ T3715] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 293.876381][ T3715] usb 2-1: Using ep0 maxpacket: 8 [ 293.996543][ T3715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.007097][ T3715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.016532][ T3715] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.029632][ T3715] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 294.038815][ T3715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.087787][ T3715] hub 2-1:1.0: bad descriptor, ignoring hub [ 294.093803][ T3715] hub: probe of 2-1:1.0 failed with error -5 [ 294.100459][ T3715] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 294.416676][ T3715] usb 2-1: USB disconnect, device number 91 02:04:23 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:23 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 02:04:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:04:23 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) clock_gettime(0x3, &(0x7f0000000080)) 02:04:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:23 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{r0, 0x93}, {r0}], 0x2, 0x0) 02:04:23 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9f3) 02:04:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 02:04:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 02:04:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) 02:04:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x1) [ 295.076400][ T142] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 295.116336][ T14] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 295.436797][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.451364][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.460500][ T142] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.477964][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.489337][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.499508][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.509019][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.518477][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.532475][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.543270][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.567603][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 295.573728][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 295.580193][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 295.587791][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 295.593686][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 295.605162][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 295.667244][ T3636] block nbd5: Receive control failed (result -32) [ 295.668156][ T8747] block nbd5: shutting down sockets [ 295.901010][ T142] usb 4-1: USB disconnect, device number 47 [ 295.909418][ T14] usb 2-1: USB disconnect, device number 92 [ 296.266367][ T3684] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 296.536690][ T3684] usb 2-1: Using ep0 maxpacket: 8 [ 296.696566][ T3684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.706874][ T3684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 296.715990][ T3684] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.728901][ T3684] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 296.738739][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.787161][ T3684] hub 2-1:1.0: bad descriptor, ignoring hub [ 296.793062][ T3684] hub: probe of 2-1:1.0 failed with error -5 [ 296.803141][ T3684] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 297.109089][ T3684] usb 2-1: USB disconnect, device number 93 02:04:25 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:25 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f0000000000)=0x4, 0x4) 02:04:25 executing program 0: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 02:04:25 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:04:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:25 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:25 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{0x0}, {&(0x7f0000001040)='n', 0x1}, {&(0x7f00000010c0)="01", 0x1}], 0x3}, 0x0) 02:04:25 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="6e1c6d9c04734facfbfbfe3b5ab8405b93233c622e9e01018b12eff607a7f01fbafb30e88da31e61e28cd7972eed10d63fdd8f756172edc70466c572dc3273bd24c5323000baeb1023d99c13805ad17eafc2bae3849d6b25f04333e5d3", 0x5d}, {&(0x7f00000010c0)="014a452789515fa0ee113125326d67c3a083052e62bcd3c5f72517bce5b9b03b2b4f95944e87768c774976d1c299e855cc233d288cfe4c18675d696d", 0x3c}], 0x3, &(0x7f00000011c0)=[{0x10}], 0x10}, 0xc) 02:04:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:26 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:26 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 297.796471][ T6] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 297.836513][ T14] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 297.976378][ T27] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 297.987717][ T3684] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 298.176412][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.191217][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.200186][ T6] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 298.211171][ T6] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.220245][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.228557][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.238701][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.248338][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.262488][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.272930][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.297288][ T6] hub 4-1:1.0: bad descriptor, ignoring hub [ 298.303573][ T6] hub: probe of 4-1:1.0 failed with error -5 [ 298.312068][ T6] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 298.327729][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 298.335184][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 298.341913][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 298.352340][ T3636] block nbd5: Receive control failed (result -32) [ 298.360480][ T8767] block nbd5: shutting down sockets [ 298.382461][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.392897][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.403521][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.412519][ T3684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.421653][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.434614][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 02:04:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 298.447739][ T27] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.456855][ T3684] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.465895][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.474599][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.497154][ T8780] block nbd4: shutting down sockets [ 298.537609][ T3684] hub 1-1:1.0: bad descriptor, ignoring hub [ 298.543562][ T3684] hub: probe of 1-1:1.0 failed with error -5 [ 298.550568][ T27] hub 3-1:1.0: bad descriptor, ignoring hub [ 298.556959][ T27] hub: probe of 3-1:1.0 failed with error -5 [ 298.563235][ T27] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 298.571384][ T3684] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 298.620152][ T8788] nbd: must specify an index to disconnect [ 298.637737][ T3685] usb 4-1: USB disconnect, device number 48 [ 298.656686][ T3715] usb 2-1: USB disconnect, device number 94 [ 298.866608][ T6] usb 1-1: USB disconnect, device number 6 [ 298.886581][ T3685] usb 3-1: USB disconnect, device number 3 [ 299.016519][ T3715] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 299.226404][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.306544][ T3715] usb 2-1: Using ep0 maxpacket: 8 [ 299.351686][ T3651] block nbd5: Receive control failed (result -32) [ 299.352169][ T8787] block nbd5: shutting down sockets [ 299.426696][ T3715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.436994][ T3715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.445899][ T3715] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.459417][ T3715] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 299.468604][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 299.468889][ T3715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.529131][ T3715] hub 2-1:1.0: bad descriptor, ignoring hub [ 299.535422][ T3715] hub: probe of 2-1:1.0 failed with error -5 [ 299.541872][ T3715] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 299.586526][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.599025][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.608039][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.621102][ T6] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 299.630215][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.677293][ T6] hub 3-1:1.0: bad descriptor, ignoring hub [ 299.683212][ T6] hub: probe of 3-1:1.0 failed with error -5 [ 299.693268][ T6] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 299.858137][ T3715] usb 2-1: USB disconnect, device number 95 [ 300.007282][ T6] usb 3-1: USB disconnect, device number 4 02:04:28 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 02:04:28 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 02:04:28 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:28 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:04:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:28 executing program 2: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:28 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 300.350124][ T8803] nbd: must specify an index to disconnect [ 300.380163][ T8797] block nbd4: shutting down sockets [ 300.526463][ T6] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 300.606484][ T3715] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.626554][ T27] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 300.706559][ T3685] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 300.716700][ T142] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 300.856435][ T3715] usb 1-1: Using ep0 maxpacket: 8 [ 300.886509][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.900880][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.909893][ T6] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 300.924660][ T6] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 300.935616][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.989708][ T6] hub 4-1:1.0: bad descriptor, ignoring hub [ 300.995780][ T6] hub: probe of 4-1:1.0 failed with error -5 [ 300.996598][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.002491][ T6] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 301.012535][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.039337][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.051677][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.062918][ T3715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.075775][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.076414][ T142] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.093566][ T3715] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 301.100092][ T8795] block nbd5: shutting down sockets [ 301.113473][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.117134][ T142] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.124150][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.141535][ T3685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.142949][ T142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 301.151720][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.151748][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.153236][ T3685] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.194858][ T142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.201418][ T3685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 301.215966][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 301.220699][ T142] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.230976][ T3715] hub: probe of 1-1:1.0 failed with error -5 02:04:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 301.237892][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.238362][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 301.257071][ T3685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.267463][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 301.276959][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 301.283198][ T3685] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.293647][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 301.307594][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.308028][ T142] hub 5-1:1.0: bad descriptor, ignoring hub [ 301.332435][ T142] hub: probe of 5-1:1.0 failed with error -5 [ 301.343383][ T142] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 301.354014][ T142] cdc_wdm 5-1:1.0: Unknown control protocol [ 301.357627][ T3685] hub 3-1:1.0: bad descriptor, ignoring hub [ 301.375318][ T3685] hub: probe of 3-1:1.0 failed with error -5 [ 301.382943][ T3685] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 301.389288][ T3685] cdc_wdm 3-1:1.0: Unknown control protocol [ 301.422685][ T8810] nbd: must specify an index to disconnect [ 301.437138][ T3715] usb 4-1: USB disconnect, device number 49 [ 301.566602][ T8800] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 301.616754][ T3684] usb 2-1: USB disconnect, device number 96 [ 301.622797][ T3715] usb 1-1: USB disconnect, device number 7 02:04:30 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 301.710937][ T8801] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 301.878838][ T8807] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 301.966463][ T3715] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 301.987691][ T3679] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 301.996759][ T142] usb 4-1: new low-speed USB device number 50 using dummy_hcd 02:04:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 302.137960][ T3651] block nbd5: Receive control failed (result -32) [ 302.146841][ T8809] block nbd5: shutting down sockets [ 302.211281][ T8816] block nbd5: NBD_DISCONNECT [ 302.246453][ T3715] usb 1-1: Using ep0 maxpacket: 8 [ 302.251630][ T3679] usb 2-1: Using ep0 maxpacket: 8 [ 302.356584][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.368468][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.377682][ T142] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 302.386540][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.388422][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 302.398463][ T3679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.423038][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.433526][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.439643][ T3679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.450878][ T3715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.460860][ T3679] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.475712][ T3715] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 302.485743][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 302.489781][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 302.494977][ T3679] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 302.504749][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 302.509957][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.521055][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 302.524028][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.577852][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 302.583967][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 302.590761][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 302.598427][ T3679] hub 2-1:1.0: bad descriptor, ignoring hub [ 302.604329][ T3679] hub: probe of 2-1:1.0 failed with error -5 [ 302.626774][ T3679] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 302.908089][ T142] usb 1-1: USB disconnect, device number 8 [ 302.922057][ T142] usb 2-1: USB disconnect, device number 97 02:04:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:31 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 303.363602][ T8820] block nbd5: NBD_DISCONNECT [ 303.371647][ T8820] block nbd5: Disconnected due to user request. [ 303.382725][ T8820] block nbd5: shutting down sockets 02:04:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 303.460129][ T8827] block nbd5: NBD_DISCONNECT [ 303.465135][ T8827] block nbd5: Disconnected due to user request. [ 303.471604][ T8827] block nbd5: shutting down sockets 02:04:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 303.551518][ T8829] block nbd5: NBD_DISCONNECT [ 303.557325][ T8829] block nbd5: Disconnected due to user request. [ 303.563684][ T8829] block nbd5: shutting down sockets [ 303.626528][ T142] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 303.637930][ T8805] usb 5-1: reset low-speed USB device number 2 using dummy_hcd [ 303.658600][ T8830] block nbd5: shutting down sockets [ 303.986546][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.996874][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.006785][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.019704][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 304.028773][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.077593][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 304.083750][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 304.095309][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 02:04:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:04:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 304.180736][ T3651] block nbd0: Receive control failed (result -32) [ 304.190019][ T8805] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 304.197160][ T8822] block nbd0: shutting down sockets 02:04:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 304.269919][ T8832] block nbd5: shutting down sockets [ 304.326550][ T142] usb 3-1: USB disconnect, device number 5 [ 304.346590][ T8814] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 304.446574][ T3679] usb 2-1: USB disconnect, device number 98 [ 304.466934][ T3715] usb 4-1: USB disconnect, device number 50 [ 304.496616][ T8824] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 304.656628][ T8819] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 304.698661][ T6] usb 5-1: USB disconnect, device number 2 [ 304.796391][ T142] usb 2-1: new high-speed USB device number 99 using dummy_hcd 02:04:33 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 304.930446][ T8841] block nbd5: shutting down sockets [ 305.012659][ T8845] block nbd5: shutting down sockets [ 305.036408][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 305.060462][ T3651] block nbd2: Receive control failed (result -32) [ 305.069283][ T8834] block nbd2: shutting down sockets [ 305.093906][ T3636] block nbd0: Receive control failed (result -32) [ 305.101932][ T8837] block nbd0: shutting down sockets 02:04:33 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 305.156603][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.167033][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 305.175917][ T142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.176418][ T3715] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 305.195489][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 305.219652][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.268034][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 305.269689][ T8848] block nbd5: shutting down sockets [ 305.274560][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 305.286580][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 305.506539][ T3679] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 305.576491][ T3715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.594815][ T142] usb 2-1: USB disconnect, device number 99 [ 305.596419][ T3715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 305.615940][ T3715] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.629638][ T3715] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 305.639925][ T3715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.688186][ T3715] hub 4-1:1.0: bad descriptor, ignoring hub [ 305.694458][ T3715] hub: probe of 4-1:1.0 failed with error -5 [ 305.701476][ T3715] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 305.926642][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.937288][ T3679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 305.947723][ T3679] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 305.957924][ T3679] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.967733][ T3679] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 02:04:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:04:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 305.976842][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.006686][ T142] usb 4-1: USB disconnect, device number 51 [ 306.052533][ T8852] block nbd5: shutting down sockets 02:04:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 306.078242][ T3679] hub 5-1:1.0: bad descriptor, ignoring hub [ 306.084172][ T3679] hub: probe of 5-1:1.0 failed with error -5 [ 306.102593][ T3679] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 306.116965][ T3679] cdc_wdm 5-1:1.0: Unknown control protocol 02:04:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 306.149053][ T8860] block nbd5: shutting down sockets 02:04:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 306.198767][ T8863] block nbd5: shutting down sockets [ 306.296366][ T3685] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 306.304112][ T8865] block nbd5: shutting down sockets 02:04:34 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:34 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:34 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 306.404644][ T8850] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 306.423667][ T8871] block nbd5: NBD_DISCONNECT [ 306.436844][ T3679] usb 5-1: USB disconnect, device number 3 [ 306.483516][ T8873] block nbd5: NBD_DISCONNECT [ 306.676632][ T6] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 306.717545][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.732152][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 306.741062][ T3685] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 306.751824][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 306.761117][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.809526][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 306.815570][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 306.822199][ T3685] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 306.834409][ T3636] block nbd2: Receive control failed (result -32) [ 306.834841][ T8856] block nbd2: shutting down sockets [ 306.846403][ T3651] block nbd0: Receive control failed (result -32) [ 306.854168][ T8854] block nbd0: shutting down sockets 02:04:35 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:35 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 306.978434][ T8875] block nbd5: NBD_DISCONNECT [ 307.036569][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.047216][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.060536][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.074353][ T6] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 307.083843][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.127355][ T6] hub 4-1:1.0: bad descriptor, ignoring hub [ 307.133532][ T6] hub: probe of 4-1:1.0 failed with error -5 [ 307.139916][ T6] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 307.146901][ T3685] usb 2-1: USB disconnect, device number 100 [ 307.448023][ T6] usb 4-1: USB disconnect, device number 52 [ 307.506886][ T3685] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 307.756362][ T3685] usb 2-1: Using ep0 maxpacket: 8 [ 307.896612][ T3685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.906848][ T3685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.915770][ T3685] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 307.926417][ T3685] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 307.935535][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.978604][ T3685] hub 2-1:1.0: bad descriptor, ignoring hub [ 307.984549][ T3685] hub: probe of 2-1:1.0 failed with error -5 [ 307.991156][ T3685] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 308.297271][ T14] usb 2-1: USB disconnect, device number 101 02:04:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:04:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:04:37 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:37 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:37 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:37 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 308.742436][ T8886] block nbd5: NBD_DISCONNECT 02:04:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 308.812193][ T8897] block nbd5: NBD_DISCONNECT 02:04:37 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 308.839612][ T8899] block nbd5: NBD_DISCONNECT 02:04:37 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 308.986658][ T14] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 309.006506][ T3683] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 309.096527][ T3685] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 309.346590][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.362355][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.371438][ T3683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.376336][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 309.387099][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.400366][ T3683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.410295][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 309.424306][ T3683] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 309.435446][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.443604][ T3683] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 309.453294][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.497571][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 309.503547][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 309.511354][ T3683] hub 2-1:1.0: bad descriptor, ignoring hub [ 309.517528][ T3683] hub: probe of 2-1:1.0 failed with error -5 [ 309.523996][ T14] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 309.526512][ T3685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.531620][ T3683] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 309.547779][ T3651] block nbd0: Receive control failed (result -32) [ 309.550129][ T3685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.556133][ T8883] block nbd0: shutting down sockets [ 309.563809][ T3636] block nbd2: Receive control failed (result -32) [ 309.576303][ T8889] block nbd2: shutting down sockets [ 309.593361][ T3685] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.619503][ T3685] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 309.629892][ T3685] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 309.640367][ T3685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.687780][ T3685] hub 5-1:1.0: bad descriptor, ignoring hub [ 309.693763][ T3685] hub: probe of 5-1:1.0 failed with error -5 [ 309.700552][ T3685] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 309.817139][ T3683] usb 4-1: USB disconnect, device number 53 [ 309.827042][ T3715] usb 2-1: USB disconnect, device number 102 [ 310.006896][ T3715] usb 5-1: USB disconnect, device number 4 [ 310.186382][ T142] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 310.426445][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 310.546457][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.557470][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.566806][ T142] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 310.577656][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 310.586783][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.638490][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 310.644536][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 310.651252][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 310.957518][ T142] usb 2-1: USB disconnect, device number 103 02:04:39 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:04:39 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:39 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:39 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:39 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:39 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 311.485838][ T8924] block nbd5: NBD_DISCONNECT 02:04:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 311.531140][ T8926] block nbd5: NBD_DISCONNECT [ 311.570982][ T8928] block nbd5: NBD_DISCONNECT [ 311.636402][ T3685] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 311.646707][ T142] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 311.656614][ T3679] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 311.876499][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 311.996485][ T3685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.011181][ T3685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.020283][ T3685] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.030365][ T3679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.040583][ T3685] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 312.050618][ T3679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.059848][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.064692][ T3685] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.079725][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.085054][ T3679] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 312.099375][ T142] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.099427][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.099454][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.136814][ T3685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.145411][ T3679] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.160513][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.177684][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 312.183642][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 312.187245][ T3685] hub 5-1:1.0: bad descriptor, ignoring hub [ 312.190389][ T142] cdc_wdm 4-1:1.0: skipping garbage [ 312.196859][ T3636] block nbd0: Receive control failed (result -32) [ 312.201655][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 312.208932][ T8909] block nbd0: shutting down sockets [ 312.219922][ T3651] block nbd2: Receive control failed (result -32) [ 312.222603][ T3679] hub 2-1:1.0: bad descriptor, ignoring hub [ 312.226974][ T8913] block nbd2: shutting down sockets [ 312.234846][ T3685] hub: probe of 5-1:1.0 failed with error -5 [ 312.247277][ T3679] hub: probe of 2-1:1.0 failed with error -5 [ 312.256080][ T3685] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 312.271985][ T3679] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 312.511422][ T3679] usb 4-1: USB disconnect, device number 54 [ 312.519222][ T3685] usb 5-1: USB disconnect, device number 5 [ 312.532039][ T3685] usb 2-1: USB disconnect, device number 104 [ 312.876424][ T142] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 313.146733][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 313.276937][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.287092][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 313.295967][ T142] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 313.306646][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 313.315664][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.369141][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 313.375198][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 313.381887][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 313.687946][ T142] usb 2-1: USB disconnect, device number 105 02:04:42 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:42 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:42 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:42 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:42 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 314.124584][ T8936] block nbd5: NBD_DISCONNECT 02:04:42 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 314.163029][ T8942] block nbd5: NBD_DISCONNECT 02:04:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 314.196548][ T8944] block nbd5: NBD_DISCONNECT 02:04:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 314.243935][ T8946] block nbd5: NBD_DISCONNECT 02:04:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 314.288982][ T8948] block nbd5: NBD_DISCONNECT 02:04:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 314.337167][ T8950] block nbd5: NBD_DISCONNECT [ 314.376440][ T3679] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 314.376549][ T142] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 314.391777][ T14] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 314.418685][ T8951] block nbd5: shutting down sockets [ 314.616359][ T3679] usb 5-1: Using ep0 maxpacket: 8 [ 314.736699][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.747132][ T3679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.756919][ T3679] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.767567][ T3679] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 314.777516][ T3679] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 314.786825][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.796644][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.807071][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.817260][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.826129][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.835979][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.837121][ T3679] hub 5-1:1.0: bad descriptor, ignoring hub [ 314.844917][ T142] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.860756][ T3679] hub: probe of 5-1:1.0 failed with error -5 [ 314.869880][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 314.872191][ T3679] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 314.885901][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.894105][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 314.905455][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.920499][ T3651] block nbd2: Receive control failed (result -32) [ 314.928739][ T8933] block nbd2: shutting down sockets [ 314.934407][ T3636] block nbd0: Receive control failed (result -32) [ 314.934590][ T8937] block nbd0: shutting down sockets [ 314.947621][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 314.953535][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 314.969036][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 314.984287][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 314.991914][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 314.998660][ T142] cdc_wdm 4-1:1.0: skipping garbage [ 315.005479][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 315.180121][ T142] usb 5-1: USB disconnect, device number 6 [ 315.266532][ T3715] usb 2-1: USB disconnect, device number 106 [ 315.296533][ T3679] usb 4-1: USB disconnect, device number 55 [ 315.616573][ T142] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 315.876352][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 315.996401][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.006924][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.015812][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.025641][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.034722][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.078040][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 316.084645][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 316.091296][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 316.407362][ T3715] usb 2-1: USB disconnect, device number 107 [ 316.467635][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.474533][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 02:04:45 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:45 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:45 executing program 3: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 316.873127][ T8953] block nbd5: shutting down sockets 02:04:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 316.960503][ T8969] block nbd5: shutting down sockets 02:04:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 317.040193][ T8975] block nbd5: shutting down sockets [ 317.086863][ T142] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 317.116535][ T3679] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 317.446498][ T142] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.456964][ T142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.466148][ T142] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.479101][ T142] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.488256][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.536623][ T3679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.547698][ T142] hub 4-1:1.0: bad descriptor, ignoring hub [ 317.552526][ T3679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.553695][ T142] hub: probe of 4-1:1.0 failed with error -5 [ 317.554033][ T142] cdc_wdm 4-1:1.0: skipping garbage [ 317.568686][ T3679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.574139][ T142] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 317.591094][ T3679] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.600308][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.641235][ T3636] block nbd2: Receive control failed (result -32) [ 317.641438][ T8960] block nbd2: shutting down sockets [ 317.667646][ T3679] hub 2-1:1.0: bad descriptor, ignoring hub [ 317.678140][ T3679] hub: probe of 2-1:1.0 failed with error -5 [ 317.688539][ T3679] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 317.876647][ T142] usb 4-1: USB disconnect, device number 56 [ 317.986571][ T3679] usb 2-1: USB disconnect, device number 108 [ 318.356459][ T3679] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 318.636698][ T3679] usb 2-1: Using ep0 maxpacket: 8 [ 318.786542][ T3679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.796884][ T3679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 318.805959][ T3679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.816004][ T3679] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 318.825256][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.878967][ T3679] hub 2-1:1.0: bad descriptor, ignoring hub [ 318.884951][ T3679] hub: probe of 2-1:1.0 failed with error -5 [ 318.891453][ T3679] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 319.208133][ T3679] usb 2-1: USB disconnect, device number 109 02:04:48 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:48 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:48 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:04:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 319.661906][ T8980] block nbd5: shutting down sockets 02:04:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:48 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:04:48 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 319.748005][ T8992] block nbd5: shutting down sockets [ 319.946355][ T142] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 320.306400][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.316635][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.325547][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.335716][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 320.344831][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.388445][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 320.394418][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 320.400935][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 320.438316][ T3636] block nbd3: Receive control failed (result -32) [ 320.446669][ T8983] block nbd3: shutting down sockets [ 320.706556][ T142] usb 2-1: USB disconnect, device number 110 [ 321.056416][ T142] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 321.296385][ T142] usb 2-1: Using ep0 maxpacket: 8 [ 321.416462][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.426630][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.435510][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.445295][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.454332][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.507770][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 321.514324][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 321.520807][ T142] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 321.836633][ T3679] usb 2-1: USB disconnect, device number 111 02:04:50 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:50 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:50 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:50 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 322.288502][ T9004] block nbd3: shutting down sockets 02:04:50 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) [ 322.313806][ T9006] block nbd5: shutting down sockets 02:04:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 322.536364][ T142] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 322.896516][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.907456][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 322.917005][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 322.927179][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.937614][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 322.947610][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.999275][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 323.005326][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 323.013416][ T142] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 323.019419][ T142] cdc_wdm 2-1:1.0: Unknown control protocol [ 323.225216][ T3636] block nbd3: Receive control failed (result -32) [ 323.231894][ T9022] block nbd3: shutting down sockets [ 323.306553][ T9013] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 323.451610][ T9013] UDC core: couldn't find an available UDC or it's busy: -16 [ 323.459873][ T9013] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.598850][ T142] usb 2-1: USB disconnect, device number 112 02:04:52 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:04:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:04:52 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:04:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:04:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:04:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 324.051342][ T9030] block nbd5: shutting down sockets 02:04:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:52 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 324.208594][ T9049] block nbd5: shutting down sockets [ 324.256364][ T27] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 324.286463][ T3679] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 324.446372][ T27] usb 5-1: device descriptor read/64, error 18 [ 324.646463][ T3679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.660813][ T3679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.670376][ T3679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 324.680409][ T3679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.690643][ T3679] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 324.699761][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.726372][ T27] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 324.747667][ T3679] hub 2-1:1.0: bad descriptor, ignoring hub [ 324.753915][ T3679] hub: probe of 2-1:1.0 failed with error -5 [ 324.765675][ T3679] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 324.772036][ T3679] cdc_wdm 2-1:1.0: Unknown control protocol [ 324.820924][ T3636] block nbd3: Receive control failed (result -32) [ 324.822243][ T9034] block nbd3: shutting down sockets [ 324.916399][ T27] usb 5-1: device descriptor read/64, error 18 [ 325.038290][ T27] usb usb5-port1: attempt power cycle [ 325.056724][ T9040] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 325.203107][ T9040] UDC core: couldn't find an available UDC or it's busy: -16 [ 325.210684][ T9040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 325.338939][ T142] usb 2-1: USB disconnect, device number 113 [ 325.456369][ T27] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 325.636552][ T27] usb 5-1: device descriptor read/8, error -61 02:04:54 executing program 1: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 02:04:54 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 325.916419][ T27] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 326.016802][ T142] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 326.126438][ T27] usb 5-1: device descriptor read/8, error -61 [ 326.247866][ T27] usb usb5-port1: unable to enumerate USB device [ 326.376536][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.386806][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.395717][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 326.405730][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.415673][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.424781][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.477692][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 326.483678][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 326.491210][ T142] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 326.497154][ T142] cdc_wdm 2-1:1.0: Unknown control protocol [ 326.796707][ T9060] cdc_wdm 2-1:1.0: Error submitting int urb - -90 02:04:55 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) 02:04:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 02:04:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:55 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 326.939671][ T9060] UDC core: couldn't find an available UDC or it's busy: -16 [ 326.947328][ T9060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 02:04:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) [ 327.048492][ T9062] block nbd5: shutting down sockets [ 327.076655][ T27] usb 2-1: USB disconnect, device number 114 [ 327.158619][ T9079] block nbd5: shutting down sockets 02:04:55 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 02:04:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) [ 327.446378][ T6] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 327.528191][ T9084] block nbd5: shutting down sockets [ 327.636373][ T6] usb 5-1: device descriptor read/64, error 18 [ 327.756508][ T142] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 327.835377][ T3636] block nbd3: Receive control failed (result -32) [ 327.842071][ T9067] block nbd3: shutting down sockets [ 327.906420][ T6] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 328.098672][ T6] usb 5-1: device descriptor read/64, error 18 [ 328.126494][ T142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.136865][ T142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.146005][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 328.156486][ T142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.166892][ T142] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 328.175937][ T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.216571][ T6] usb usb5-port1: attempt power cycle [ 328.222754][ T142] hub 2-1:1.0: bad descriptor, ignoring hub [ 328.228909][ T142] hub: probe of 2-1:1.0 failed with error -5 [ 328.236687][ T142] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 328.242582][ T142] cdc_wdm 2-1:1.0: Unknown control protocol [ 328.636373][ T6] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 328.806658][ T6] usb 5-1: device descriptor read/8, error -61 [ 329.076413][ T6] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 329.246548][ T6] usb 5-1: device descriptor read/8, error -61 [ 329.366565][ T6] usb usb5-port1: unable to enumerate USB device 02:04:58 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:04:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:04:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:04:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:04:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 330.104621][ T9091] block nbd5: shutting down sockets 02:04:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 330.139181][ T9100] block nbd0: shutting down sockets [ 330.506430][ T142] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 330.696496][ T142] usb 5-1: device descriptor read/64, error 18 [ 330.863869][ T3636] block nbd3: Receive control failed (result -32) [ 330.865609][ T9093] block nbd3: shutting down sockets [ 330.967445][ T142] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 331.156366][ T142] usb 5-1: device descriptor read/64, error 18 [ 331.276565][ T142] usb usb5-port1: attempt power cycle [ 331.686482][ T142] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 331.856506][ T142] usb 5-1: device descriptor read/8, error -61 [ 332.126417][ T142] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 332.296587][ T142] usb 5-1: device descriptor read/8, error -61 [ 332.416778][ T142] usb usb5-port1: unable to enumerate USB device 02:05:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 02:05:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:05:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) [ 332.830984][ T9088] cdc_wdm 2-1:1.0: Error autopm - -16 [ 332.836817][ T27] usb 2-1: USB disconnect, device number 115 [ 332.899950][ T9108] block nbd5: shutting down sockets [ 332.912002][ T9107] block nbd0: shutting down sockets 02:05:01 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:05:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:01 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) [ 333.116587][ T9117] block nbd0: shutting down sockets [ 333.124421][ T9121] block nbd5: shutting down sockets [ 333.187367][ T9127] block nbd2: shutting down sockets [ 333.276406][ T27] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 333.446455][ T3715] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 333.526451][ T142] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 333.696931][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.704089][ T3636] block nbd3: Receive control failed (result -32) [ 333.707080][ T9112] block nbd3: shutting down sockets [ 333.707115][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.707151][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 333.707176][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.707210][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 333.716579][ T142] usb 5-1: device descriptor read/64, error 18 [ 333.729615][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.819697][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 333.825915][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 333.834475][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 333.840504][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 333.906551][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.916769][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.925636][ T3715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 333.935558][ T3715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.945303][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 333.954358][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.006355][ T142] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 334.008034][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 334.019976][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 334.206380][ T142] usb 5-1: device descriptor read/64, error 18 [ 334.326436][ T142] usb usb5-port1: attempt power cycle [ 334.473878][ T9132] UDC core: couldn't find an available UDC or it's busy: -16 [ 334.483648][ T9132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 334.736372][ T142] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 334.906586][ T142] usb 5-1: device descriptor read/8, error -61 [ 335.176361][ T142] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 335.347606][ T142] usb 5-1: device descriptor read/8, error -61 [ 335.468361][ T142] usb usb5-port1: unable to enumerate USB device 02:05:06 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 02:05:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:05:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:06 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 338.429238][ T9116] cdc_wdm 2-1:1.0: Error autopm - -16 [ 338.435657][ T27] usb 2-1: USB disconnect, device number 116 [ 338.443658][ T3715] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 338.443690][ T9130] cdc_wdm 2-1:1.0: Error autopm - -16 02:05:06 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) [ 338.477657][ T3715] cdc_wdm 1-1:1.0: Unknown control protocol [ 338.496624][ T9135] block nbd2: shutting down sockets 02:05:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 338.520604][ T9136] block nbd5: shutting down sockets 02:05:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 02:05:07 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/dev\x00') pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/46, 0x2e, 0x100000001) 02:05:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 338.616972][ T9148] block nbd2: shutting down sockets [ 338.630629][ T9150] block nbd5: shutting down sockets 02:05:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/46, 0x2e, 0x100000001) 02:05:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) (fail_nth: 1) [ 338.719135][ T9155] block nbd5: shutting down sockets [ 338.797566][ T9160] FAULT_INJECTION: forcing a failure. [ 338.797566][ T9160] name failslab, interval 1, probability 0, space 0, times 1 [ 338.810427][ T3679] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 338.810424][ T9160] CPU: 0 PID: 9160 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 338.828329][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.838485][ T9160] Call Trace: [ 338.841758][ T9160] [ 338.844784][ T9160] dump_stack_lvl+0xcd/0x134 [ 338.849389][ T9160] should_fail.cold+0x5/0xa [ 338.853887][ T9160] should_failslab+0x5/0x10 [ 338.858458][ T9160] __kmalloc+0x7e/0x350 [ 338.862712][ T9160] ? tomoyo_realpath_from_path+0xc3/0x620 [ 338.868671][ T9160] tomoyo_realpath_from_path+0xc3/0x620 [ 338.874214][ T9160] ? tomoyo_profile+0x42/0x50 [ 338.878889][ T9160] tomoyo_path_number_perm+0x1d5/0x590 [ 338.884387][ T9160] ? tomoyo_path_number_perm+0x18d/0x590 [ 338.890028][ T9160] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 338.895848][ T9160] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 338.901832][ T9160] ? __context_tracking_exit+0xb8/0xe0 [ 338.907410][ T9160] ? __fget_files+0x286/0x470 [ 338.908498][ T3715] usb 1-1: reset low-speed USB device number 9 using dummy_hcd [ 338.912098][ T9160] security_file_ioctl+0x50/0xb0 [ 338.924675][ T9160] __x64_sys_ioctl+0xb3/0x200 [ 338.929459][ T9160] do_syscall_64+0x35/0xb0 [ 338.933871][ T9160] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.939755][ T9160] RIP: 0033:0x7f5c306890e9 [ 338.944267][ T9160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 338.963974][ T9160] RSP: 002b:00007f5c317ed168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.972384][ T9160] RAX: ffffffffffffffda RBX: 00007f5c3079bf60 RCX: 00007f5c306890e9 [ 338.980607][ T9160] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 338.988570][ T9160] RBP: 00007f5c317ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.996538][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.004501][ T9160] R13: 00007ffeae8f195f R14: 00007f5c317ed300 R15: 0000000000022000 [ 339.012499][ T9160] [ 339.027036][ T27] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 339.027330][ T9160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.086379][ T3679] usb 5-1: device descriptor read/64, error 18 [ 339.303852][ T3636] block nbd3: Receive control failed (result -32) [ 339.311799][ T9142] block nbd3: shutting down sockets [ 339.378592][ T3679] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 339.426570][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.438812][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.448476][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 339.459513][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.469606][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.480601][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.539482][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 339.545687][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 339.552878][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 339.563330][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 339.586561][ T3679] usb 5-1: device descriptor read/64, error 18 [ 339.596432][ T3651] block nbd2: Receive control failed (result -32) [ 339.604162][ T9160] block nbd2: shutting down sockets [ 339.717563][ T3679] usb usb5-port1: attempt power cycle [ 340.001814][ T9162] UDC core: couldn't find an available UDC or it's busy: -16 [ 340.010486][ T9162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 340.146602][ T3679] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 340.346692][ T3679] usb 5-1: device descriptor read/8, error -61 [ 340.637926][ T3679] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 340.826481][ T3679] usb 5-1: device descriptor read/8, error -61 [ 340.946560][ T3679] usb usb5-port1: unable to enumerate USB device 02:05:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:12 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:12 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a20000009058116"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) [ 344.068094][ T9145] cdc_wdm 2-1:1.0: Error autopm - -16 [ 344.075867][ T9147] cdc_wdm 2-1:1.0: Error autopm - -16 [ 344.078543][ T3683] usb 2-1: USB disconnect, device number 117 02:05:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) (fail_nth: 1) 02:05:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) [ 344.160051][ T9168] block nbd5: shutting down sockets 02:05:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) [ 344.234305][ T9179] FAULT_INJECTION: forcing a failure. [ 344.234305][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 344.252710][ T9179] CPU: 0 PID: 9179 Comm: syz-executor.1 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 344.263514][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.273849][ T9179] Call Trace: [ 344.277126][ T9179] [ 344.280065][ T9179] dump_stack_lvl+0xcd/0x134 [ 344.284697][ T9179] should_fail.cold+0x5/0xa [ 344.289223][ T9179] should_failslab+0x5/0x10 [ 344.293912][ T9179] __kmalloc+0x7e/0x350 [ 344.298083][ T9179] ? tomoyo_realpath_from_path+0xc3/0x620 [ 344.303843][ T9179] tomoyo_realpath_from_path+0xc3/0x620 [ 344.309395][ T9179] ? tomoyo_profile+0x42/0x50 [ 344.314066][ T9179] tomoyo_path_number_perm+0x1d5/0x590 [ 344.319597][ T9179] ? tomoyo_path_number_perm+0x18d/0x590 [ 344.325220][ T9179] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 344.331589][ T9179] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 344.337605][ T9179] ? __context_tracking_exit+0xb8/0xe0 [ 344.343073][ T9179] ? __fget_files+0x286/0x470 [ 344.347749][ T9179] security_file_ioctl+0x50/0xb0 [ 344.352688][ T9179] __x64_sys_ioctl+0xb3/0x200 [ 344.357360][ T9179] do_syscall_64+0x35/0xb0 [ 344.361772][ T9179] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 344.367674][ T9179] RIP: 0033:0x7f5b08c890e9 [ 344.372084][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 344.391682][ T9179] RSP: 002b:00007f5b09d2d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.400354][ T9179] RAX: ffffffffffffffda RBX: 00007f5b08d9bf60 RCX: 00007f5b08c890e9 [ 344.408324][ T9179] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 344.416287][ T9179] RBP: 00007f5b09d2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 344.424247][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 02:05:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 344.432210][ T9179] R13: 00007ffcad0753ff R14: 00007f5b09d2d300 R15: 0000000000022000 [ 344.440189][ T9179] [ 344.450013][ T9179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.467340][ T9180] block nbd5: shutting down sockets [ 344.506508][ T3715] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 344.549031][ T9190] block nbd5: shutting down sockets [ 344.558003][ T3679] usb 1-1: reset low-speed USB device number 9 using dummy_hcd [ 344.716701][ T3715] usb 5-1: device descriptor read/64, error 18 02:05:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x2) [ 344.958104][ T3651] block nbd2: Receive control failed (result -32) [ 344.958310][ T9173] block nbd2: shutting down sockets [ 345.017300][ T3715] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 345.025386][ T3636] block nbd1: Receive control failed (result -32) [ 345.026724][ T9179] block nbd1: shutting down sockets [ 345.046777][ T9196] block nbd2: shutting down sockets [ 345.216384][ T3715] usb 5-1: device descriptor read/64, error 18 [ 345.336601][ T3715] usb usb5-port1: attempt power cycle [ 345.514358][ T9178] UDC core: couldn't find an available UDC or it's busy: -16 [ 345.521877][ T9178] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 345.659820][ T3679] usb 1-1: USB disconnect, device number 9 [ 345.766537][ T3715] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 345.966559][ T3715] usb 5-1: device descriptor read/8, error -61 [ 346.256493][ T3715] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 346.436441][ T3715] usb 5-1: device descriptor read/8, error -61 [ 346.566998][ T3715] usb usb5-port1: unable to enumerate USB device 02:05:15 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x10) 02:05:15 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) 02:05:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x301) 02:05:15 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 347.170780][ T9200] block nbd5: shutting down sockets [ 347.175200][ T9199] block nbd2: shutting down sockets 02:05:15 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:15 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 347.258343][ T9212] block nbd5: shutting down sockets [ 347.296934][ T9217] block nbd2: shutting down sockets [ 347.406385][ T3715] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 347.586520][ T142] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 347.806618][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.817025][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.825962][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 347.838180][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 347.847330][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.898521][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 347.904536][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 347.913328][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 347.970419][ T3636] block nbd1: Receive control failed (result -32) [ 347.978497][ T9205] block nbd1: shutting down sockets [ 348.010260][ T142] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.020513][ T142] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 348.029833][ T142] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.043721][ T142] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 348.053349][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.098505][ T142] hub 5-1:1.0: bad descriptor, ignoring hub [ 348.105006][ T9206] FAULT_INJECTION: forcing a failure. [ 348.105006][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 348.117836][ T142] hub: probe of 5-1:1.0 failed with error -5 [ 348.124102][ T142] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 348.130618][ T9206] CPU: 0 PID: 9206 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 348.141045][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.151098][ T9206] Call Trace: [ 348.154366][ T9206] [ 348.157286][ T9206] dump_stack_lvl+0xcd/0x134 [ 348.161883][ T9206] should_fail.cold+0x5/0xa [ 348.166382][ T9206] ? getname_flags.part.0+0x50/0x4f0 [ 348.171680][ T9206] should_failslab+0x5/0x10 [ 348.176188][ T9206] kmem_cache_alloc+0x5e/0x3b0 [ 348.180957][ T9206] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 348.186950][ T9206] getname_flags.part.0+0x50/0x4f0 [ 348.192078][ T9206] getname+0x8e/0xd0 [ 348.195986][ T9206] do_sys_openat2+0xf5/0x4c0 [ 348.200568][ T9206] ? find_held_lock+0x2d/0x110 [ 348.205414][ T9206] ? build_open_flags+0x6f0/0x6f0 [ 348.210441][ T9206] ? lock_downgrade+0x6e0/0x6e0 [ 348.215291][ T9206] __x64_sys_openat+0x13f/0x1f0 [ 348.220156][ T9206] ? __ia32_sys_open+0x1c0/0x1c0 [ 348.225090][ T9206] ? syscall_enter_from_user_mode+0x21/0x70 [ 348.230981][ T9206] do_syscall_64+0x35/0xb0 [ 348.235399][ T9206] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 348.241285][ T9206] RIP: 0033:0x7fdfe9c3c004 [ 348.245695][ T9206] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 348.265293][ T9206] RSP: 002b:00007fdfeadbbca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 348.273695][ T9206] RAX: ffffffffffffffda RBX: 00007fdfe9d9bf60 RCX: 00007fdfe9c3c004 [ 348.281652][ T9206] RDX: 0000000000000002 RSI: 00007fdfeadbbd40 RDI: 00000000ffffff9c [ 348.289710][ T9206] RBP: 00007fdfeadbbd40 R08: 0000000000000000 R09: 000000000000000f [ 348.297669][ T9206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 348.305625][ T9206] R13: 00007ffc502e5e2f R14: 00007fdfeadbc300 R15: 0000000000022000 [ 348.313593][ T9206] [ 348.357274][ T142] usb 5-1: USB disconnect, device number 31 [ 348.461399][ T3679] usb 1-1: USB disconnect, device number 10 02:05:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125d) 02:05:17 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x2) 02:05:17 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 2) 02:05:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 02:05:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x10) 02:05:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 348.878220][ T9224] block nbd1: shutting down sockets [ 348.887034][ T9222] block nbd5: shutting down sockets [ 348.892922][ T9223] block nbd2: shutting down sockets 02:05:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125e) 02:05:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 348.958716][ T9235] nbd: must specify an index to disconnect [ 348.965109][ T9234] block nbd5: shutting down sockets 02:05:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x301) 02:05:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125f) [ 349.016814][ T9237] block nbd1: shutting down sockets [ 349.024622][ T9240] block nbd2: shutting down sockets [ 349.068711][ T9245] nbd: must specify an index to disconnect [ 349.092410][ T9244] block nbd5: shutting down sockets [ 349.128942][ T9248] block nbd1: shutting down sockets [ 349.133651][ T9250] block nbd2: shutting down sockets [ 349.139715][ T3715] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 349.176352][ T27] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 349.506571][ T3715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.520702][ T3715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 349.529707][ T3715] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.543333][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.553518][ T3715] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 349.562638][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 349.573062][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.581268][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 349.592268][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 349.602445][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.637323][ T3715] hub 5-1:1.0: bad descriptor, ignoring hub [ 349.643776][ T3715] hub: probe of 5-1:1.0 failed with error -5 [ 349.650758][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 349.656795][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 349.663067][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 349.670187][ T3715] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 349.852454][ T9233] FAULT_INJECTION: forcing a failure. [ 349.852454][ T9233] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 349.865623][ T9233] CPU: 0 PID: 9233 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 349.876055][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.886213][ T9233] Call Trace: [ 349.889489][ T9233] [ 349.892406][ T9233] dump_stack_lvl+0xcd/0x134 [ 349.897069][ T9233] should_fail.cold+0x5/0xa [ 349.901584][ T9233] strncpy_from_user+0x34/0x3c0 [ 349.906440][ T9233] getname_flags.part.0+0x95/0x4f0 [ 349.911585][ T9233] getname+0x8e/0xd0 [ 349.915471][ T9233] do_sys_openat2+0xf5/0x4c0 [ 349.920056][ T9233] ? find_held_lock+0x2d/0x110 [ 349.924836][ T9233] ? build_open_flags+0x6f0/0x6f0 [ 349.929863][ T9233] ? lock_downgrade+0x6e0/0x6e0 [ 349.934834][ T9233] __x64_sys_openat+0x13f/0x1f0 [ 349.939697][ T9233] ? __ia32_sys_open+0x1c0/0x1c0 [ 349.944654][ T9233] ? syscall_enter_from_user_mode+0x21/0x70 [ 349.950570][ T9233] do_syscall_64+0x35/0xb0 [ 349.955016][ T9233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 349.960935][ T9233] RIP: 0033:0x7fdfe9c3c004 [ 349.965351][ T9233] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 349.984968][ T9233] RSP: 002b:00007fdfeadbbca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 349.993385][ T9233] RAX: ffffffffffffffda RBX: 00007fdfe9d9bf60 RCX: 00007fdfe9c3c004 [ 350.001353][ T9233] RDX: 0000000000000002 RSI: 00007fdfeadbbd40 RDI: 00000000ffffff9c [ 350.009306][ T9233] RBP: 00007fdfeadbbd40 R08: 0000000000000000 R09: 000000000000000f [ 350.017264][ T9233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 350.025218][ T9233] R13: 00007ffc502e5e2f R14: 00007fdfeadbc300 R15: 0000000000022000 [ 350.033189][ T9233] [ 350.047281][ T27] usb 5-1: USB disconnect, device number 32 [ 350.167322][ T142] usb 1-1: USB disconnect, device number 11 02:05:18 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:18 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 3) 02:05:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 02:05:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125d) 02:05:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1260) 02:05:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125e) 02:05:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1261) [ 350.612201][ T9258] block nbd2: shutting down sockets [ 350.617967][ T9257] block nbd1: shutting down sockets [ 350.628346][ T9261] nbd: must specify an index to disconnect [ 350.634525][ T9256] block nbd5: shutting down sockets [ 350.636395][ T142] usb 5-1: new low-speed USB device number 33 using dummy_hcd 02:05:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 1) [ 350.757794][ T9271] block nbd1: shutting down sockets [ 350.767003][ T9270] block nbd2: shutting down sockets [ 350.795904][ T9275] FAULT_INJECTION: forcing a failure. [ 350.795904][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.818863][ T9275] CPU: 1 PID: 9275 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 350.829392][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.839452][ T9275] Call Trace: [ 350.842723][ T9275] [ 350.845642][ T9275] dump_stack_lvl+0xcd/0x134 [ 350.850239][ T9275] should_fail.cold+0x5/0xa [ 350.854746][ T9275] _copy_from_user+0x2a/0x170 [ 350.859417][ T9275] __copy_msghdr_from_user+0x91/0x4b0 [ 350.864778][ T9275] ? __ia32_sys_shutdown+0x70/0x70 [ 350.869878][ T9275] ? __lock_acquire+0xbca/0x56c0 [ 350.874815][ T9275] sendmsg_copy_msghdr+0xa1/0x160 [ 350.879828][ T9275] ? do_recvmmsg+0x6d0/0x6d0 [ 350.884402][ T9275] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 350.890467][ T9275] ? _parse_integer+0x30/0x30 [ 350.895158][ T9275] ___sys_sendmsg+0xc6/0x170 [ 350.899913][ T9275] ? sendmsg_copy_msghdr+0x160/0x160 [ 350.905197][ T9275] ? __fget_files+0x264/0x470 [ 350.909875][ T9275] ? lock_downgrade+0x6e0/0x6e0 [ 350.914732][ T9275] ? __fget_files+0x286/0x470 [ 350.919411][ T9275] ? __fget_light+0xea/0x270 [ 350.923995][ T9275] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 350.930231][ T9275] __sys_sendmsg+0xe5/0x1b0 [ 350.934735][ T9275] ? __sys_sendmsg_sock+0x30/0x30 [ 350.939844][ T9275] ? syscall_enter_from_user_mode+0x21/0x70 [ 350.945750][ T9275] do_syscall_64+0x35/0xb0 [ 350.950163][ T9275] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.956050][ T9275] RIP: 0033:0x7f73578890e9 [ 350.960455][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 350.980142][ T9275] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.988549][ T9275] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 350.996511][ T9275] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 351.004469][ T9275] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 351.012599][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.020553][ T9275] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 351.028535][ T9275] [ 351.037136][ T3683] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 351.046913][ T9274] block nbd5: shutting down sockets [ 351.176442][ T142] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.186840][ T142] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.196127][ T142] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.209483][ T142] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 351.218711][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.269537][ T142] hub 5-1:1.0: bad descriptor, ignoring hub [ 351.275657][ T142] hub: probe of 5-1:1.0 failed with error -5 [ 351.282149][ T142] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 351.396457][ T3683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.406694][ T3683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.415968][ T3683] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 351.426688][ T3683] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 351.435729][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.488663][ T3683] hub 1-1:1.0: bad descriptor, ignoring hub [ 351.494594][ T3683] hub: probe of 1-1:1.0 failed with error -5 [ 351.501135][ T3683] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 351.586563][ T3682] usb 5-1: USB disconnect, device number 33 [ 351.690490][ T9265] FAULT_INJECTION: forcing a failure. [ 351.690490][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 351.703490][ T9265] CPU: 1 PID: 9265 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 351.713943][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.724015][ T9265] Call Trace: [ 351.727300][ T9265] [ 351.730241][ T9265] dump_stack_lvl+0xcd/0x134 [ 351.734824][ T9265] should_fail.cold+0x5/0xa [ 351.739327][ T9265] ? __alloc_file+0x21/0x270 [ 351.743921][ T9265] should_failslab+0x5/0x10 [ 351.748420][ T9265] kmem_cache_alloc+0x5e/0x3b0 [ 351.753427][ T9265] ? stack_trace_save+0x8c/0xc0 [ 351.758534][ T9265] __alloc_file+0x21/0x270 [ 351.763146][ T9265] alloc_empty_file+0x6d/0x170 [ 351.767913][ T9265] path_openat+0xe4/0x2910 [ 351.772324][ T9265] ? __lock_acquire+0x163e/0x56c0 [ 351.777376][ T9265] ? path_lookupat+0x860/0x860 [ 351.782395][ T9265] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 351.788402][ T9265] do_filp_open+0x1aa/0x400 [ 351.792928][ T9265] ? may_open_dev+0xf0/0xf0 [ 351.797429][ T9265] ? alloc_fd+0x2f0/0x670 [ 351.801761][ T9265] ? lock_downgrade+0x6e0/0x6e0 [ 351.806862][ T9265] ? rwlock_bug.part.0+0x90/0x90 [ 351.811791][ T9265] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 351.818241][ T9265] ? _find_next_bit+0x1e3/0x260 [ 351.823118][ T9265] ? _raw_spin_unlock+0x24/0x40 [ 351.827980][ T9265] ? alloc_fd+0x2f0/0x670 [ 351.832308][ T9265] do_sys_openat2+0x16d/0x4c0 [ 351.836981][ T9265] ? find_held_lock+0x2d/0x110 [ 351.841754][ T9265] ? build_open_flags+0x6f0/0x6f0 [ 351.846772][ T9265] ? lock_downgrade+0x6e0/0x6e0 [ 351.852022][ T9265] __x64_sys_openat+0x13f/0x1f0 [ 351.857078][ T9265] ? __ia32_sys_open+0x1c0/0x1c0 [ 351.862037][ T9265] ? syscall_enter_from_user_mode+0x21/0x70 [ 351.868071][ T9265] do_syscall_64+0x35/0xb0 [ 351.872518][ T9265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 351.878512][ T9265] RIP: 0033:0x7fdfe9c3c004 [ 351.882951][ T9265] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 351.903539][ T9265] RSP: 002b:00007fdfeadbbca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 351.912063][ T9265] RAX: ffffffffffffffda RBX: 00007fdfe9d9bf60 RCX: 00007fdfe9c3c004 [ 351.920033][ T9265] RDX: 0000000000000002 RSI: 00007fdfeadbbd40 RDI: 00000000ffffff9c [ 351.928214][ T9265] RBP: 00007fdfeadbbd40 R08: 0000000000000000 R09: 000000000000000f 02:05:20 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 351.936192][ T9265] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 351.944152][ T9265] R13: 00007ffc502e5e2f R14: 00007fdfeadbc300 R15: 0000000000022000 [ 351.952122][ T9265] [ 352.097897][ T3715] usb 1-1: USB disconnect, device number 12 [ 352.276393][ T3679] usb 5-1: new low-speed USB device number 34 using dummy_hcd 02:05:20 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 4) 02:05:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125f) 02:05:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1262) 02:05:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 2) 02:05:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1263) 02:05:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1260) [ 352.536916][ T9282] block nbd2: shutting down sockets [ 352.542541][ T9280] block nbd1: shutting down sockets [ 352.556806][ T9283] block nbd3: shutting down sockets [ 352.565272][ T9284] FAULT_INJECTION: forcing a failure. [ 352.565272][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.615077][ T9284] CPU: 0 PID: 9284 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 352.625641][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.636138][ T9284] Call Trace: [ 352.639416][ T9284] [ 352.642342][ T9284] dump_stack_lvl+0xcd/0x134 [ 352.646948][ T9284] should_fail.cold+0x5/0xa [ 352.651465][ T9284] _copy_from_user+0x2a/0x170 [ 352.656150][ T9284] iovec_from_user+0x149/0x3a0 02:05:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 352.660906][ T9284] ? _copy_from_user+0xf9/0x170 [ 352.665760][ T9284] __import_iovec+0x65/0x5d0 [ 352.670450][ T9284] import_iovec+0x10c/0x150 [ 352.674962][ T9284] sendmsg_copy_msghdr+0x12d/0x160 [ 352.680072][ T9284] ? do_recvmmsg+0x6d0/0x6d0 [ 352.684662][ T9284] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 352.690647][ T9284] ? _parse_integer+0x30/0x30 [ 352.695336][ T9284] ___sys_sendmsg+0xc6/0x170 [ 352.700018][ T9284] ? sendmsg_copy_msghdr+0x160/0x160 [ 352.705310][ T9284] ? __fget_files+0x264/0x470 [ 352.710110][ T9284] ? lock_downgrade+0x6e0/0x6e0 [ 352.714971][ T9284] ? __fget_files+0x286/0x470 [ 352.719656][ T9284] ? __fget_light+0xea/0x270 [ 352.724262][ T9284] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 352.730532][ T9284] __sys_sendmsg+0xe5/0x1b0 [ 352.735047][ T9284] ? __sys_sendmsg_sock+0x30/0x30 [ 352.740085][ T9284] ? syscall_enter_from_user_mode+0x21/0x70 [ 352.745988][ T9284] do_syscall_64+0x35/0xb0 [ 352.750415][ T9284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.756309][ T9284] RIP: 0033:0x7f73578890e9 [ 352.760730][ T9284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 352.766623][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.780345][ T9284] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.780375][ T9284] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 352.780388][ T9284] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 02:05:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1261) [ 352.780402][ T9284] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.780416][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.780430][ T9284] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 352.780457][ T9284] [ 352.845842][ T9281] block nbd5: shutting down sockets 02:05:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1264) [ 352.876746][ T9292] block nbd2: shutting down sockets [ 352.886634][ T9293] block nbd3: shutting down sockets [ 352.936364][ T142] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 352.953696][ T9300] block nbd1: shutting down sockets [ 352.976120][ T3679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.012548][ T3679] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.025991][ T9302] block nbd2: shutting down sockets [ 353.040383][ T3679] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 353.053706][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.108595][ T3679] hub 5-1:1.0: bad descriptor, ignoring hub [ 353.114519][ T3679] hub: probe of 5-1:1.0 failed with error -5 [ 353.125870][ T3679] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 353.316479][ T142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.326694][ T142] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.335565][ T142] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 353.346210][ T142] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 353.355585][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.408029][ T142] hub 1-1:1.0: bad descriptor, ignoring hub [ 353.414375][ T142] hub: probe of 1-1:1.0 failed with error -5 [ 353.421158][ T142] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 353.436572][ T3679] usb 5-1: USB disconnect, device number 34 [ 353.610562][ T9289] FAULT_INJECTION: forcing a failure. [ 353.610562][ T9289] name failslab, interval 1, probability 0, space 0, times 0 [ 353.626367][ T9289] CPU: 0 PID: 9289 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 353.636796][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.646838][ T9289] Call Trace: [ 353.650098][ T9289] [ 353.653008][ T9289] dump_stack_lvl+0xcd/0x134 [ 353.657587][ T9289] should_fail.cold+0x5/0xa [ 353.662068][ T9289] ? security_file_alloc+0x34/0x170 [ 353.667253][ T9289] should_failslab+0x5/0x10 [ 353.671744][ T9289] kmem_cache_alloc+0x5e/0x3b0 [ 353.676492][ T9289] security_file_alloc+0x34/0x170 [ 353.681504][ T9289] __alloc_file+0xd9/0x270 [ 353.685911][ T9289] alloc_empty_file+0x6d/0x170 [ 353.690661][ T9289] path_openat+0xe4/0x2910 [ 353.695076][ T9289] ? __lock_acquire+0x163e/0x56c0 [ 353.700090][ T9289] ? path_lookupat+0x860/0x860 [ 353.704831][ T9289] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 353.710797][ T9289] do_filp_open+0x1aa/0x400 [ 353.715277][ T9289] ? may_open_dev+0xf0/0xf0 [ 353.719760][ T9289] ? alloc_fd+0x2f0/0x670 [ 353.724068][ T9289] ? lock_downgrade+0x6e0/0x6e0 [ 353.728906][ T9289] ? rwlock_bug.part.0+0x90/0x90 [ 353.733824][ T9289] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 353.740042][ T9289] ? _find_next_bit+0x1e3/0x260 [ 353.744894][ T9289] ? _raw_spin_unlock+0x24/0x40 [ 353.749723][ T9289] ? alloc_fd+0x2f0/0x670 [ 353.754036][ T9289] do_sys_openat2+0x16d/0x4c0 [ 353.758694][ T9289] ? find_held_lock+0x2d/0x110 [ 353.763435][ T9289] ? build_open_flags+0x6f0/0x6f0 [ 353.768453][ T9289] ? lock_downgrade+0x6e0/0x6e0 [ 353.773294][ T9289] __x64_sys_openat+0x13f/0x1f0 [ 353.778132][ T9289] ? __ia32_sys_open+0x1c0/0x1c0 [ 353.783055][ T9289] ? syscall_enter_from_user_mode+0x21/0x70 [ 353.788933][ T9289] do_syscall_64+0x35/0xb0 [ 353.793349][ T9289] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 353.799233][ T9289] RIP: 0033:0x7fdfe9c3c004 [ 353.803631][ T9289] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 353.823217][ T9289] RSP: 002b:00007fdfeadbbca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 353.831623][ T9289] RAX: ffffffffffffffda RBX: 00007fdfe9d9bf60 RCX: 00007fdfe9c3c004 [ 353.839575][ T9289] RDX: 0000000000000002 RSI: 00007fdfeadbbd40 RDI: 00000000ffffff9c [ 353.847545][ T9289] RBP: 00007fdfeadbbd40 R08: 0000000000000000 R09: 000000000000000f [ 353.855494][ T9289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 353.863440][ T9289] R13: 00007ffc502e5e2f R14: 00007fdfeadbc300 R15: 0000000000022000 [ 353.871398][ T9289] 02:05:22 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1262) [ 354.002772][ T3715] usb 1-1: USB disconnect, device number 13 [ 354.027175][ T9305] block nbd1: shutting down sockets [ 354.266380][ T3683] usb 5-1: new low-speed USB device number 35 using dummy_hcd 02:05:22 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 5) 02:05:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 3) 02:05:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:05:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1265) 02:05:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1263) 02:05:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1267) [ 354.467534][ T9311] block nbd2: shutting down sockets [ 354.469383][ T9313] FAULT_INJECTION: forcing a failure. [ 354.469383][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 354.486483][ T9310] block nbd3: shutting down sockets [ 354.507471][ T9314] block nbd1: shutting down sockets [ 354.536418][ T9313] CPU: 1 PID: 9313 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 354.546861][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.556920][ T9313] Call Trace: [ 354.560199][ T9313] [ 354.563122][ T9313] dump_stack_lvl+0xcd/0x134 [ 354.567712][ T9313] should_fail.cold+0x5/0xa [ 354.572318][ T9313] should_failslab+0x5/0x10 [ 354.576823][ T9313] kmem_cache_alloc_node+0x65/0x3f0 [ 354.582036][ T9313] ? __alloc_skb+0x215/0x340 [ 354.586623][ T9313] __alloc_skb+0x215/0x340 [ 354.591042][ T9313] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 354.597276][ T9313] netlink_sendmsg+0x98f/0xe00 [ 354.602060][ T9313] ? netlink_unicast+0x7f0/0x7f0 [ 354.606993][ T9313] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 354.613227][ T9313] ? netlink_unicast+0x7f0/0x7f0 [ 354.618159][ T9313] sock_sendmsg+0xcf/0x120 [ 354.622572][ T9313] ____sys_sendmsg+0x6e2/0x800 [ 354.627331][ T9313] ? kernel_sendmsg+0x50/0x50 [ 354.632003][ T9313] ? do_recvmmsg+0x6d0/0x6d0 [ 354.636579][ T9313] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 354.642556][ T9313] ? _parse_integer+0x30/0x30 [ 354.647229][ T9313] ___sys_sendmsg+0xf3/0x170 [ 354.651810][ T9313] ? sendmsg_copy_msghdr+0x160/0x160 [ 354.657084][ T9313] ? lock_downgrade+0x6e0/0x6e0 [ 354.661931][ T9313] ? __fget_files+0x286/0x470 [ 354.666606][ T9313] ? __fget_light+0xea/0x270 [ 354.671185][ T9313] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 354.677417][ T9313] __sys_sendmsg+0xe5/0x1b0 [ 354.681911][ T9313] ? __sys_sendmsg_sock+0x30/0x30 [ 354.686928][ T9313] ? syscall_enter_from_user_mode+0x21/0x70 [ 354.692815][ T9313] do_syscall_64+0x35/0xb0 [ 354.697227][ T9313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 354.703120][ T9313] RIP: 0033:0x7f73578890e9 [ 354.707517][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 354.727112][ T9313] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 02:05:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1264) [ 354.735511][ T9313] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 354.743642][ T9313] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 354.751604][ T9313] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 354.759571][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.767528][ T9313] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 354.775494][ T9313] 02:05:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 4) [ 354.789469][ T9309] block nbd5: shutting down sockets [ 354.806770][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 02:05:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1268) [ 354.852644][ T9320] block nbd2: shutting down sockets [ 354.854813][ T3683] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 354.875163][ T3683] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.888539][ T142] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 354.897875][ T3683] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 354.912990][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.924913][ T9323] block nbd1: shutting down sockets [ 354.932724][ T9328] FAULT_INJECTION: forcing a failure. [ 354.932724][ T9328] name failslab, interval 1, probability 0, space 0, times 0 [ 354.957969][ T9328] CPU: 0 PID: 9328 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 354.968401][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.978571][ T9328] Call Trace: [ 354.981844][ T9328] [ 354.984767][ T9328] dump_stack_lvl+0xcd/0x134 [ 354.989365][ T9328] should_fail.cold+0x5/0xa [ 354.993880][ T9328] should_failslab+0x5/0x10 [ 354.998388][ T9328] __kmalloc_node_track_caller+0x7d/0x360 [ 355.004332][ T9328] ? netlink_sendmsg+0x98f/0xe00 [ 355.009270][ T9328] __alloc_skb+0xde/0x340 [ 355.013589][ T9328] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.019836][ T9328] netlink_sendmsg+0x98f/0xe00 [ 355.024799][ T9328] ? netlink_unicast+0x7f0/0x7f0 [ 355.029736][ T9328] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.036247][ T9328] ? netlink_unicast+0x7f0/0x7f0 [ 355.041183][ T9328] sock_sendmsg+0xcf/0x120 [ 355.045585][ T9328] ____sys_sendmsg+0x6e2/0x800 [ 355.050333][ T9328] ? kernel_sendmsg+0x50/0x50 [ 355.055007][ T9328] ? do_recvmmsg+0x6d0/0x6d0 [ 355.059578][ T9328] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 355.065636][ T9328] ? _parse_integer+0x30/0x30 [ 355.070330][ T9328] ___sys_sendmsg+0xf3/0x170 [ 355.074913][ T9328] ? sendmsg_copy_msghdr+0x160/0x160 [ 355.080186][ T9328] ? lock_downgrade+0x6e0/0x6e0 [ 355.085036][ T9328] ? __fget_files+0x286/0x470 [ 355.089713][ T9328] ? __fget_light+0xea/0x270 [ 355.094299][ T9328] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 355.100533][ T9328] __sys_sendmsg+0xe5/0x1b0 [ 355.105027][ T9328] ? __sys_sendmsg_sock+0x30/0x30 [ 355.110050][ T9328] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.115938][ T9328] do_syscall_64+0x35/0xb0 [ 355.120360][ T9328] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.126245][ T9328] RIP: 0033:0x7f73578890e9 [ 355.130659][ T9328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 355.150352][ T9328] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.158801][ T9328] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 355.166766][ T9328] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 355.174730][ T9328] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 355.182688][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.190642][ T9328] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 355.198609][ T9328] [ 355.206636][ T9325] block nbd5: shutting down sockets [ 355.213000][ T9329] block nbd2: shutting down sockets [ 355.219545][ T3683] hub 5-1:1.0: bad descriptor, ignoring hub [ 355.225814][ T3683] hub: probe of 5-1:1.0 failed with error -5 [ 355.232633][ T3683] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 355.446429][ T142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.456879][ T142] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.465779][ T142] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 355.476337][ T142] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 355.485372][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.529570][ T142] hub 1-1:1.0: bad descriptor, ignoring hub [ 355.535510][ T142] hub: probe of 1-1:1.0 failed with error -5 [ 355.541965][ T142] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 355.551179][ T3683] usb 5-1: USB disconnect, device number 35 [ 355.731115][ T9318] FAULT_INJECTION: forcing a failure. [ 355.731115][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 355.744194][ T9318] CPU: 0 PID: 9318 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 355.754603][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.764737][ T9318] Call Trace: [ 355.768094][ T9318] [ 355.771011][ T9318] dump_stack_lvl+0xcd/0x134 [ 355.775599][ T9318] should_fail.cold+0x5/0xa [ 355.780096][ T9318] should_failslab+0x5/0x10 [ 355.784589][ T9318] kmem_cache_alloc_lru+0x65/0x720 [ 355.789706][ T9318] ? __d_alloc+0x32/0x960 [ 355.794024][ T9318] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 355.800004][ T9318] __d_alloc+0x32/0x960 [ 355.804169][ T9318] d_alloc+0x4a/0x230 [ 355.808156][ T9318] d_alloc_parallel+0xe7/0x1af0 [ 355.813007][ T9318] ? __d_lookup+0x429/0x790 [ 355.817497][ T9318] ? lock_downgrade+0x6e0/0x6e0 [ 355.822354][ T9318] ? find_held_lock+0x2d/0x110 [ 355.827885][ T9318] ? __d_lookup_rcu+0x750/0x750 [ 355.832757][ T9318] ? __d_lookup+0x44b/0x790 [ 355.837259][ T9318] ? d_lookup+0x14f/0x170 [ 355.841585][ T9318] lookup_open.isra.0+0xb66/0x1690 [ 355.846697][ T9318] ? lookup_fast+0x6d0/0x6d0 [ 355.851294][ T9318] ? ceph_x_create_authorizer+0x100/0x3b0 [ 355.857020][ T9318] ? ceph_x_create_authorizer+0x100/0x3b0 [ 355.862729][ T9318] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.868966][ T9318] ? __mnt_want_write+0x1fa/0x2e0 [ 355.873990][ T9318] path_openat+0x9a2/0x2910 [ 355.878494][ T9318] ? path_lookupat+0x860/0x860 [ 355.883256][ T9318] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 355.889327][ T9318] do_filp_open+0x1aa/0x400 [ 355.893821][ T9318] ? may_open_dev+0xf0/0xf0 [ 355.898324][ T9318] ? rwlock_bug.part.0+0x90/0x90 [ 355.903258][ T9318] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 355.909486][ T9318] ? _find_next_bit+0x1e3/0x260 [ 355.914333][ T9318] ? _raw_spin_unlock+0x24/0x40 [ 355.919181][ T9318] ? alloc_fd+0x2f0/0x670 [ 355.923516][ T9318] do_sys_openat2+0x16d/0x4c0 [ 355.928187][ T9318] ? find_held_lock+0x2d/0x110 [ 355.932947][ T9318] ? build_open_flags+0x6f0/0x6f0 [ 355.937967][ T9318] ? lock_downgrade+0x6e0/0x6e0 [ 355.942820][ T9318] __x64_sys_openat+0x13f/0x1f0 [ 355.947664][ T9318] ? __ia32_sys_open+0x1c0/0x1c0 [ 355.952601][ T9318] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.958508][ T9318] do_syscall_64+0x35/0xb0 [ 355.962949][ T9318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.968853][ T9318] RIP: 0033:0x7fdfe9c3c004 [ 355.973377][ T9318] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 355.993699][ T9318] RSP: 002b:00007fdfeadbbca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 356.002111][ T9318] RAX: ffffffffffffffda RBX: 00007fdfe9d9bf60 RCX: 00007fdfe9c3c004 [ 356.010073][ T9318] RDX: 0000000000000002 RSI: 00007fdfeadbbd40 RDI: 00000000ffffff9c [ 356.018033][ T9318] RBP: 00007fdfeadbbd40 R08: 0000000000000000 R09: 000000000000000f [ 356.025990][ T9318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 356.033945][ T9318] R13: 00007ffc502e5e2f R14: 00007fdfeadbc300 R15: 0000000000022000 [ 356.041921][ T9318] 02:05:24 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1269) [ 356.167681][ T3715] usb 1-1: USB disconnect, device number 14 [ 356.207649][ T9333] block nbd2: shutting down sockets [ 356.436347][ T3683] usb 5-1: new low-speed USB device number 36 using dummy_hcd 02:05:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) (fail_nth: 1) 02:05:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1274) 02:05:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1265) 02:05:25 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 6) 02:05:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 5) [ 356.617369][ T9344] FAULT_INJECTION: forcing a failure. [ 356.617369][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 356.618764][ T9342] FAULT_INJECTION: forcing a failure. [ 356.618764][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.631746][ T9340] block nbd1: shutting down sockets [ 356.645187][ T9342] CPU: 0 PID: 9342 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 356.649476][ T9339] block nbd2: shutting down sockets [ 356.659403][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.659418][ T9342] Call Trace: [ 356.659425][ T9342] [ 356.659433][ T9342] dump_stack_lvl+0xcd/0x134 [ 356.685436][ T9342] should_fail.cold+0x5/0xa [ 356.689950][ T9342] _copy_from_iter+0x389/0x15a0 [ 356.694817][ T9342] ? _copy_from_iter_nocache+0x1510/0x1510 [ 356.705358][ T9342] ? rcu_read_lock_sched_held+0x3a/0x70 [ 356.710909][ T9342] ? memset+0x20/0x40 [ 356.714887][ T9342] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 356.721210][ T9342] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 356.727448][ T9342] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.733767][ T9342] ? __phys_addr+0xc4/0x140 [ 356.738272][ T9342] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.744505][ T9342] ? __phys_addr_symbol+0x2c/0x70 [ 356.749525][ T9342] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 356.755238][ T9342] ? __check_object_size+0x16c/0x4f0 [ 356.760528][ T9342] netlink_sendmsg+0x86c/0xe00 [ 356.765313][ T9342] ? netlink_unicast+0x7f0/0x7f0 [ 356.770249][ T9342] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 356.776489][ T9342] ? netlink_unicast+0x7f0/0x7f0 [ 356.781439][ T9342] sock_sendmsg+0xcf/0x120 [ 356.785869][ T9342] ____sys_sendmsg+0x6e2/0x800 [ 356.790626][ T9342] ? kernel_sendmsg+0x50/0x50 [ 356.795295][ T9342] ? do_recvmmsg+0x6d0/0x6d0 [ 356.799872][ T9342] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 356.806024][ T9342] ? _parse_integer+0x30/0x30 [ 356.810702][ T9342] ___sys_sendmsg+0xf3/0x170 [ 356.815282][ T9342] ? sendmsg_copy_msghdr+0x160/0x160 [ 356.820556][ T9342] ? lock_downgrade+0x6e0/0x6e0 [ 356.825413][ T9342] ? __fget_files+0x286/0x470 [ 356.830269][ T9342] ? __fget_light+0xea/0x270 [ 356.834854][ T9342] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.841192][ T9342] __sys_sendmsg+0xe5/0x1b0 [ 356.845686][ T9342] ? __sys_sendmsg_sock+0x30/0x30 [ 356.850707][ T9342] ? syscall_enter_from_user_mode+0x21/0x70 [ 356.856594][ T9342] do_syscall_64+0x35/0xb0 [ 356.861005][ T9342] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.866892][ T9342] RIP: 0033:0x7f73578890e9 [ 356.871298][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 356.890907][ T9342] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.899320][ T9342] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 356.907372][ T9342] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 356.915346][ T9342] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 356.923308][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.931283][ T9342] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 356.939262][ T9342] [ 356.947596][ T9344] CPU: 0 PID: 9344 Comm: syz-executor.3 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 356.958136][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.968225][ T9344] Call Trace: [ 356.971506][ T9344] [ 356.974445][ T9344] dump_stack_lvl+0xcd/0x134 [ 356.979043][ T9344] should_fail.cold+0x5/0xa [ 356.983546][ T9344] should_failslab+0x5/0x10 [ 356.988040][ T9344] __kmalloc+0x7e/0x350 [ 356.992183][ T9344] ? tomoyo_realpath_from_path+0xc3/0x620 [ 356.997909][ T9344] tomoyo_realpath_from_path+0xc3/0x620 [ 357.003462][ T9344] ? tomoyo_profile+0x42/0x50 [ 357.008152][ T9344] tomoyo_path_number_perm+0x1d5/0x590 [ 357.013605][ T9344] ? tomoyo_path_number_perm+0x18d/0x590 [ 357.019230][ T9344] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 357.025167][ T9344] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 357.031166][ T9344] ? __context_tracking_exit+0xb8/0xe0 [ 357.036623][ T9344] ? __fget_files+0x286/0x470 [ 357.041303][ T9344] security_file_ioctl+0x50/0xb0 [ 357.046245][ T9344] __x64_sys_ioctl+0xb3/0x200 [ 357.050942][ T9344] do_syscall_64+0x35/0xb0 [ 357.055385][ T9344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 357.061274][ T9344] RIP: 0033:0x7f3a2e2890e9 [ 357.065683][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 357.085646][ T9344] RSP: 002b:00007f3a2f38d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.094073][ T9344] RAX: ffffffffffffffda RBX: 00007f3a2e39bf60 RCX: 00007f3a2e2890e9 [ 357.102220][ T9344] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 357.110192][ T9344] RBP: 00007f3a2f38d1d0 R08: 0000000000000000 R09: 0000000000000000 02:05:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1267) 02:05:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1276) 02:05:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 6) [ 357.118439][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.126401][ T9344] R13: 00007ffc3559deef R14: 00007f3a2f38d300 R15: 0000000000022000 [ 357.134406][ T9344] [ 357.148937][ T9337] block nbd5: shutting down sockets 02:05:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1268) [ 357.201811][ T9344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.237066][ T9348] block nbd1: shutting down sockets 02:05:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1277) [ 357.266832][ T9350] block nbd2: shutting down sockets [ 357.276638][ T9353] FAULT_INJECTION: forcing a failure. [ 357.276638][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 357.289930][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.303292][ T9353] CPU: 1 PID: 9353 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 357.311409][ T3683] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.313719][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.313768][ T9353] Call Trace: [ 357.313775][ T9353] [ 357.323646][ T6] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 357.333039][ T9353] dump_stack_lvl+0xcd/0x134 [ 357.333074][ T9353] should_fail.cold+0x5/0xa [ 357.333102][ T9353] should_failslab+0x5/0x10 [ 357.333124][ T9353] __kmalloc+0x7e/0x350 [ 357.333143][ T9353] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 357.346800][ T3683] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.351327][ T9353] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 357.351370][ T9353] genl_family_rcv_msg_doit+0xda/0x320 [ 357.351399][ T9353] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 357.351430][ T9353] ? mutex_lock_io_nested+0x1150/0x1150 [ 357.351458][ T9353] ? memset+0x20/0x40 [ 357.351485][ T9353] ? genl_op_from_small+0x23/0x3c0 [ 357.351515][ T9353] ? genl_get_cmd+0x3cf/0x480 [ 357.351546][ T9353] genl_rcv_msg+0x328/0x580 [ 357.351578][ T9353] ? genl_get_cmd+0x480/0x480 [ 357.351606][ T9353] ? nbd_genl_connect+0x1930/0x1930 [ 357.351641][ T9353] ? lock_release+0x720/0x720 [ 357.351675][ T9353] netlink_rcv_skb+0x153/0x420 [ 357.351702][ T9353] ? genl_get_cmd+0x480/0x480 [ 357.351733][ T9353] ? netlink_ack+0xa80/0xa80 [ 357.351766][ T9353] ? netlink_deliver_tap+0x1b1/0xc40 [ 357.358145][ T3683] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 357.360726][ T9353] genl_rcv+0x24/0x40 [ 357.360755][ T9353] netlink_unicast+0x543/0x7f0 [ 357.360785][ T9353] ? netlink_attachskb+0x880/0x880 [ 357.365022][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.372171][ T9353] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 357.372200][ T9353] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 357.372224][ T9353] ? __phys_addr_symbol+0x2c/0x70 [ 357.372252][ T9353] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 357.372278][ T9353] ? __check_object_size+0x16c/0x4f0 [ 357.372307][ T9353] netlink_sendmsg+0x904/0xe00 [ 357.526541][ T9353] ? netlink_unicast+0x7f0/0x7f0 [ 357.531593][ T9353] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 357.537886][ T9353] ? netlink_unicast+0x7f0/0x7f0 [ 357.542821][ T9353] sock_sendmsg+0xcf/0x120 [ 357.547257][ T9353] ____sys_sendmsg+0x6e2/0x800 [ 357.552024][ T9353] ? kernel_sendmsg+0x50/0x50 [ 357.556691][ T9353] ? do_recvmmsg+0x6d0/0x6d0 [ 357.561274][ T9353] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 357.567253][ T9353] ? _parse_integer+0x30/0x30 [ 357.572029][ T9353] ___sys_sendmsg+0xf3/0x170 [ 357.576887][ T9353] ? sendmsg_copy_msghdr+0x160/0x160 [ 357.582189][ T9353] ? lock_downgrade+0x6e0/0x6e0 [ 357.587051][ T9353] ? __fget_files+0x286/0x470 [ 357.591734][ T9353] ? __fget_light+0xea/0x270 [ 357.596324][ T9353] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 357.602578][ T9353] __sys_sendmsg+0xe5/0x1b0 [ 357.607074][ T9353] ? __sys_sendmsg_sock+0x30/0x30 [ 357.612100][ T9353] ? syscall_enter_from_user_mode+0x21/0x70 [ 357.617992][ T9353] do_syscall_64+0x35/0xb0 [ 357.622403][ T9353] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 357.628287][ T9353] RIP: 0033:0x7f73578890e9 [ 357.632708][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 357.652322][ T9353] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.660725][ T9353] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 357.668776][ T9353] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 357.676733][ T9353] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 357.684690][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.692644][ T9353] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 357.700830][ T9353] [ 357.716883][ T9354] block nbd1: shutting down sockets [ 357.722236][ T3636] block nbd3: Receive control failed (result -32) [ 357.727346][ T3683] hub 5-1:1.0: bad descriptor, ignoring hub [ 357.729952][ T9344] block nbd3: shutting down sockets [ 357.739569][ T9351] block nbd5: shutting down sockets [ 357.745521][ T9356] block nbd2: shutting down sockets [ 357.755709][ T3683] hub: probe of 5-1:1.0 failed with error -5 [ 357.767939][ T3683] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 357.956722][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.967831][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.976962][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 357.987727][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 357.997066][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.049479][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 358.055385][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 358.056516][ T3679] usb 5-1: USB disconnect, device number 36 [ 358.062060][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 358.250771][ T9346] FAULT_INJECTION: forcing a failure. [ 358.250771][ T9346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.264693][ T9346] CPU: 1 PID: 9346 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 358.275113][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.285151][ T9346] Call Trace: [ 358.288414][ T9346] [ 358.291340][ T9346] dump_stack_lvl+0xcd/0x134 [ 358.295927][ T9346] should_fail.cold+0x5/0xa [ 358.300426][ T9346] _copy_to_user+0x2a/0x140 [ 358.304941][ T9346] simple_read_from_buffer+0xcc/0x160 [ 358.310309][ T9346] proc_fail_nth_read+0x187/0x220 [ 358.315325][ T9346] ? proc_exe_link+0x1d0/0x1d0 [ 358.320182][ T9346] ? security_file_permission+0xab/0xd0 [ 358.325718][ T9346] ? proc_exe_link+0x1d0/0x1d0 [ 358.330465][ T9346] vfs_read+0x1ef/0x5d0 [ 358.334611][ T9346] ksys_read+0x127/0x250 [ 358.338839][ T9346] ? vfs_write+0xac0/0xac0 [ 358.343256][ T9346] ? syscall_enter_from_user_mode+0x21/0x70 [ 358.349609][ T9346] do_syscall_64+0x35/0xb0 [ 358.354121][ T9346] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 358.360015][ T9346] RIP: 0033:0x7fdfe9c3bc9c [ 358.364423][ T9346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 358.384042][ T9346] RSP: 002b:00007fdfeadbc160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.392541][ T9346] RAX: ffffffffffffffda RBX: 00007fdfe9d9bf60 RCX: 00007fdfe9c3bc9c [ 358.400517][ T9346] RDX: 000000000000000f RSI: 00007fdfeadbc1e0 RDI: 0000000000000004 [ 358.408476][ T9346] RBP: 00007fdfeadbc1d0 R08: 0000000000000000 R09: 000000000000000f [ 358.416697][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.424848][ T9346] R13: 00007ffc502e5e2f R14: 00007fdfeadbc300 R15: 0000000000022000 [ 358.432825][ T9346] 02:05:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 7) 02:05:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:05:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1278) 02:05:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1269) 02:05:26 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:27 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 358.566805][ T3679] usb 1-1: USB disconnect, device number 15 02:05:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1279) 02:05:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1274) [ 358.607113][ T9359] block nbd2: shutting down sockets [ 358.607275][ T9363] block nbd1: shutting down sockets [ 358.634556][ T9368] block nbd5: NBD_DISCONNECT [ 358.640607][ T9368] FAULT_INJECTION: forcing a failure. [ 358.640607][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 358.674769][ T9368] CPU: 1 PID: 9368 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 358.685380][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.695432][ T9368] Call Trace: [ 358.698704][ T9368] [ 358.701768][ T9368] dump_stack_lvl+0xcd/0x134 [ 358.706360][ T9368] should_fail.cold+0x5/0xa [ 358.710871][ T9368] should_failslab+0x5/0x10 [ 358.715364][ T9368] kmem_cache_alloc_node+0x65/0x3f0 [ 358.720635][ T9368] ? __alloc_skb+0x215/0x340 [ 358.725396][ T9368] __alloc_skb+0x215/0x340 [ 358.729808][ T9368] alloc_skb_with_frags+0x93/0x730 [ 358.734912][ T9368] ? is_dynamic_key.part.0+0x130/0x130 [ 358.740369][ T9368] ? io_schedule_timeout+0x140/0x140 [ 358.745654][ T9368] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 358.751888][ T9368] sock_alloc_send_pskb+0x793/0x920 [ 358.757094][ T9368] ? sock_wmalloc+0x120/0x120 [ 358.761761][ T9368] ? unix_gc+0xe90/0xe90 [ 358.765994][ T9368] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 358.771969][ T9368] ? dev_vprintk_emit+0x36e/0x3b2 [ 358.776986][ T9368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 358.783228][ T9368] unix_stream_sendmsg+0x606/0x1080 [ 358.788440][ T9368] ? maybe_init_creds+0x510/0x510 [ 358.793462][ T9368] ? aa_af_perm+0x230/0x230 [ 358.797964][ T9368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 358.804198][ T9368] ? maybe_init_creds+0x510/0x510 [ 358.809217][ T9368] sock_sendmsg+0xcf/0x120 [ 358.813635][ T9368] sock_xmit+0x26e/0x540 [ 358.817872][ T9368] ? nbd_set_size+0x570/0x570 [ 358.822550][ T9368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 358.828785][ T9368] nbd_disconnect+0x2a9/0x378 [ 358.833456][ T9368] ? sock_xmit.cold+0x99/0x99 [ 358.838132][ T9368] ? wait_for_completion_io_timeout+0x20/0x20 [ 358.844196][ T9368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 358.850432][ T9368] ? security_capable+0x8f/0xc0 [ 358.855287][ T9368] ? __radix_tree_lookup+0x211/0x2a0 [ 358.860579][ T9368] nbd_disconnect_and_put+0x25/0x120 [ 358.865871][ T9368] nbd_genl_disconnect+0x372/0x4e0 [ 358.871007][ T9368] ? nbd_genl_connect+0x1930/0x1930 [ 358.876216][ T9368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 358.882465][ T9368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 358.889866][ T9368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 358.897160][ T9368] genl_family_rcv_msg_doit+0x228/0x320 [ 358.902712][ T9368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 358.910081][ T9368] ? mutex_lock_io_nested+0x1150/0x1150 [ 358.915628][ T9368] ? genl_op_from_small+0x23/0x3c0 [ 358.920740][ T9368] ? genl_get_cmd+0x3cf/0x480 [ 358.925425][ T9368] genl_rcv_msg+0x328/0x580 [ 358.929949][ T9368] ? genl_get_cmd+0x480/0x480 [ 358.934623][ T9368] ? nbd_genl_connect+0x1930/0x1930 [ 358.939821][ T9368] ? lock_release+0x720/0x720 [ 358.944499][ T9368] netlink_rcv_skb+0x153/0x420 [ 358.949263][ T9368] ? genl_get_cmd+0x480/0x480 [ 358.953958][ T9368] ? netlink_ack+0xa80/0xa80 [ 358.958547][ T9368] ? netlink_deliver_tap+0x1b1/0xc40 [ 358.963834][ T9368] genl_rcv+0x24/0x40 [ 358.967830][ T9368] netlink_unicast+0x543/0x7f0 [ 358.972591][ T9368] ? netlink_attachskb+0x880/0x880 [ 358.977694][ T9368] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 358.984051][ T9368] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 358.990682][ T9368] ? __phys_addr_symbol+0x2c/0x70 [ 358.995720][ T9368] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 359.001430][ T9368] ? __check_object_size+0x16c/0x4f0 [ 359.006732][ T9368] netlink_sendmsg+0x904/0xe00 [ 359.011502][ T9368] ? netlink_unicast+0x7f0/0x7f0 [ 359.016448][ T9368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.022697][ T9368] ? netlink_unicast+0x7f0/0x7f0 [ 359.027633][ T9368] sock_sendmsg+0xcf/0x120 [ 359.032047][ T9368] ____sys_sendmsg+0x6e2/0x800 [ 359.036825][ T9368] ? kernel_sendmsg+0x50/0x50 [ 359.041492][ T9368] ? do_recvmmsg+0x6d0/0x6d0 [ 359.046071][ T9368] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 359.052077][ T9368] ? _parse_integer+0x30/0x30 [ 359.056762][ T9368] ___sys_sendmsg+0xf3/0x170 [ 359.061349][ T9368] ? sendmsg_copy_msghdr+0x160/0x160 [ 359.066632][ T9368] ? lock_downgrade+0x6e0/0x6e0 [ 359.071497][ T9368] ? __fget_files+0x286/0x470 [ 359.076184][ T9368] ? __fget_light+0xea/0x270 [ 359.080772][ T9368] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 359.087012][ T9368] __sys_sendmsg+0xe5/0x1b0 [ 359.091512][ T9368] ? __sys_sendmsg_sock+0x30/0x30 [ 359.096542][ T9368] ? syscall_enter_from_user_mode+0x21/0x70 [ 359.102434][ T9368] do_syscall_64+0x35/0xb0 [ 359.106846][ T9368] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 359.112736][ T9368] RIP: 0033:0x7f73578890e9 [ 359.117146][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 359.136752][ T9368] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.145170][ T9368] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 359.153428][ T9368] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 359.161398][ T9368] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 359.169359][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.177320][ T9368] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 359.185298][ T9368] [ 359.199461][ T9368] block nbd5: Send disconnect failed -105 [ 359.205600][ T9368] block nbd5: Disconnected due to user request. [ 359.212338][ T9368] block nbd5: shutting down sockets 02:05:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127a) 02:05:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 8) 02:05:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1276) [ 359.228180][ T9372] block nbd1: shutting down sockets [ 359.228180][ T9371] block nbd2: shutting down sockets [ 359.318744][ T9379] block nbd5: NBD_DISCONNECT [ 359.323416][ T9379] FAULT_INJECTION: forcing a failure. [ 359.323416][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 359.338069][ T9379] CPU: 1 PID: 9379 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 359.341108][ T9378] block nbd2: shutting down sockets [ 359.348500][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.348549][ T9379] Call Trace: [ 359.348556][ T9379] [ 359.348564][ T9379] dump_stack_lvl+0xcd/0x134 [ 359.348599][ T9379] should_fail.cold+0x5/0xa [ 359.348630][ T9379] should_failslab+0x5/0x10 [ 359.348652][ T9379] __kmalloc_node_track_caller+0x7d/0x360 [ 359.348676][ T9379] ? alloc_skb_with_frags+0x93/0x730 [ 359.370945][ T9381] block nbd1: shutting down sockets [ 359.374659][ T9379] __alloc_skb+0xde/0x340 [ 359.404049][ T9379] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 359.410293][ T9379] alloc_skb_with_frags+0x93/0x730 [ 359.415409][ T9379] ? is_dynamic_key.part.0+0x130/0x130 [ 359.420873][ T9379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 359.427128][ T9379] sock_alloc_send_pskb+0x793/0x920 [ 359.432333][ T9379] ? sock_wmalloc+0x120/0x120 [ 359.437002][ T9379] ? unix_gc+0xe90/0xe90 [ 359.441236][ T9379] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 359.447215][ T9379] ? dev_vprintk_emit+0x36e/0x3b2 [ 359.452231][ T9379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.458464][ T9379] unix_stream_sendmsg+0x606/0x1080 [ 359.463670][ T9379] ? maybe_init_creds+0x510/0x510 [ 359.468685][ T9379] ? aa_af_perm+0x230/0x230 [ 359.473187][ T9379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.479421][ T9379] ? maybe_init_creds+0x510/0x510 [ 359.484445][ T9379] sock_sendmsg+0xcf/0x120 [ 359.488857][ T9379] sock_xmit+0x26e/0x540 [ 359.493099][ T9379] ? nbd_set_size+0x570/0x570 [ 359.497781][ T9379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.504018][ T9379] nbd_disconnect+0x2a9/0x378 [ 359.508806][ T9379] ? sock_xmit.cold+0x99/0x99 [ 359.513485][ T9379] ? wait_for_completion_io_timeout+0x20/0x20 [ 359.519544][ T9379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.525777][ T9379] ? security_capable+0x8f/0xc0 [ 359.530617][ T9379] ? __radix_tree_lookup+0x211/0x2a0 [ 359.535896][ T9379] nbd_disconnect_and_put+0x25/0x120 [ 359.541178][ T9379] nbd_genl_disconnect+0x372/0x4e0 [ 359.546305][ T9379] ? nbd_genl_connect+0x1930/0x1930 [ 359.551495][ T9379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.557727][ T9379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 359.565105][ T9379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 359.572387][ T9379] genl_family_rcv_msg_doit+0x228/0x320 [ 359.578197][ T9379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 359.585565][ T9379] ? mutex_lock_io_nested+0x1150/0x1150 [ 359.591370][ T9379] ? genl_op_from_small+0x23/0x3c0 [ 359.596490][ T9379] ? genl_get_cmd+0x3cf/0x480 [ 359.601165][ T9379] genl_rcv_msg+0x328/0x580 [ 359.605671][ T9379] ? genl_get_cmd+0x480/0x480 [ 359.610816][ T9379] ? nbd_genl_connect+0x1930/0x1930 [ 359.616037][ T9379] ? lock_release+0x720/0x720 [ 359.620716][ T9379] netlink_rcv_skb+0x153/0x420 [ 359.625672][ T9379] ? genl_get_cmd+0x480/0x480 [ 359.630354][ T9379] ? netlink_ack+0xa80/0xa80 [ 359.635030][ T9379] ? netlink_deliver_tap+0x1b1/0xc40 [ 359.640312][ T9379] genl_rcv+0x24/0x40 [ 359.644310][ T9379] netlink_unicast+0x543/0x7f0 [ 359.649253][ T9379] ? netlink_attachskb+0x880/0x880 [ 359.654377][ T9379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 359.660611][ T9379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 359.666860][ T9379] ? __phys_addr_symbol+0x2c/0x70 [ 359.671967][ T9379] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 359.677758][ T9379] ? __check_object_size+0x16c/0x4f0 [ 359.683212][ T9379] netlink_sendmsg+0x904/0xe00 [ 359.687976][ T9379] ? netlink_unicast+0x7f0/0x7f0 [ 359.692911][ T9379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 359.699160][ T9379] ? netlink_unicast+0x7f0/0x7f0 [ 359.704089][ T9379] sock_sendmsg+0xcf/0x120 [ 359.708495][ T9379] ____sys_sendmsg+0x6e2/0x800 [ 359.713249][ T9379] ? kernel_sendmsg+0x50/0x50 [ 359.717927][ T9379] ? do_recvmmsg+0x6d0/0x6d0 [ 359.722680][ T9379] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 359.728658][ T9379] ? _parse_integer+0x30/0x30 [ 359.733352][ T9379] ___sys_sendmsg+0xf3/0x170 [ 359.737949][ T9379] ? sendmsg_copy_msghdr+0x160/0x160 [ 359.743231][ T9379] ? lock_downgrade+0x6e0/0x6e0 [ 359.748087][ T9379] ? __fget_files+0x286/0x470 [ 359.752856][ T9379] ? __fget_light+0xea/0x270 [ 359.757442][ T9379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 359.763702][ T9379] __sys_sendmsg+0xe5/0x1b0 [ 359.768491][ T9379] ? __sys_sendmsg_sock+0x30/0x30 [ 359.773518][ T9379] ? syscall_enter_from_user_mode+0x21/0x70 [ 359.779427][ T9379] do_syscall_64+0x35/0xb0 [ 359.784033][ T9379] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 359.789941][ T9379] RIP: 0033:0x7f73578890e9 [ 359.794363][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 359.814065][ T9379] RSP: 002b:00007f7358903168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.822471][ T9379] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f73578890e9 [ 359.830432][ T9379] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000011 [ 359.838389][ T9379] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 359.846346][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.854316][ T9379] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 359.862292][ T9379] 02:05:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127b) 02:05:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1277) [ 359.867608][ T27] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 359.873922][ T9366] block nbd3: shutting down sockets [ 359.896461][ T9379] block nbd5: Disconnected due to user request. [ 359.914755][ T9379] block nbd5: shutting down sockets 02:05:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x2) 02:05:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (fail_nth: 9) 02:05:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1278) [ 359.942947][ T3679] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 359.956894][ T9383] block nbd1: shutting down sockets [ 359.991701][ T9385] block nbd2: shutting down sockets [ 360.008890][ T9387] block nbd3: shutting down sockets [ 360.018645][ T9391] block nbd1: shutting down sockets [ 360.019354][ T9390] block nbd5: NBD_DISCONNECT [ 360.041881][ T9390] block nbd5: Disconnected due to user request. [ 360.062917][ T9390] block nbd5: shutting down sockets [ 360.076531][ T9390] FAULT_INJECTION: forcing a failure. [ 360.076531][ T9390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.090343][ T9390] CPU: 1 PID: 9390 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 360.100966][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.111493][ T9390] Call Trace: [ 360.114996][ T9390] [ 360.117924][ T9390] dump_stack_lvl+0xcd/0x134 [ 360.122518][ T9390] should_fail.cold+0x5/0xa [ 360.127103][ T9390] _copy_to_user+0x2a/0x140 [ 360.131600][ T9390] simple_read_from_buffer+0xcc/0x160 [ 360.136966][ T9390] proc_fail_nth_read+0x187/0x220 [ 360.141981][ T9390] ? proc_exe_link+0x1d0/0x1d0 [ 360.146734][ T9390] ? security_file_permission+0xab/0xd0 [ 360.152281][ T9390] ? proc_exe_link+0x1d0/0x1d0 [ 360.157033][ T9390] vfs_read+0x1ef/0x5d0 [ 360.161186][ T9390] ksys_read+0x127/0x250 [ 360.165415][ T9390] ? vfs_write+0xac0/0xac0 [ 360.169821][ T9390] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.175706][ T9390] do_syscall_64+0x35/0xb0 [ 360.180116][ T9390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 360.186011][ T9390] RIP: 0033:0x7f735783bc9c [ 360.190415][ T9390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 360.210011][ T9390] RSP: 002b:00007f7358903160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.218695][ T9390] RAX: ffffffffffffffda RBX: 00007f735799bf60 RCX: 00007f735783bc9c [ 360.226687][ T9390] RDX: 000000000000000f RSI: 00007f73589031e0 RDI: 0000000000000006 [ 360.234692][ T9390] RBP: 00007f73589031d0 R08: 0000000000000000 R09: 0000000000000000 [ 360.242684][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.250685][ T9390] R13: 00007ffcd4f0b0ef R14: 00007f7358903300 R15: 0000000000022000 [ 360.258674][ T9390] [ 360.466531][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.477199][ T3679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.491265][ T3679] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.500791][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.513851][ T3679] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 360.524310][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.538258][ T3679] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.547429][ T27] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.556518][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.564945][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.607479][ T3679] hub 1-1:1.0: bad descriptor, ignoring hub [ 360.613541][ T3679] hub: probe of 1-1:1.0 failed with error -5 [ 360.620640][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 360.628769][ T27] hub: probe of 5-1:1.0 failed with error -5 [ 360.635647][ T27] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 360.642516][ T3679] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 360.936789][ T27] usb 1-1: USB disconnect, device number 16 [ 360.944030][ T3679] usb 5-1: USB disconnect, device number 37 02:05:29 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) 02:05:29 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1279) 02:05:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x10) 02:05:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127c) 02:05:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x301) 02:05:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127d) 02:05:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 361.376910][ T9397] block nbd3: shutting down sockets [ 361.379302][ T9399] block nbd5: NBD_DISCONNECT [ 361.386929][ T9393] block nbd2: shutting down sockets [ 361.390154][ T9399] block nbd5: Disconnected due to user request. [ 361.400927][ T9399] block nbd5: shutting down sockets [ 361.407075][ T9396] block nbd1: shutting down sockets 02:05:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127a) 02:05:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125d) [ 361.497477][ T9405] block nbd3: shutting down sockets [ 361.537241][ T9406] block nbd2: shutting down sockets 02:05:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127e) [ 361.558815][ T9409] block nbd5: NBD_DISCONNECT [ 361.563673][ T9411] block nbd1: shutting down sockets [ 361.563783][ T9409] block nbd5: Disconnected due to user request. [ 361.575369][ T9413] block nbd3: shutting down sockets [ 361.604345][ T9409] block nbd5: shutting down sockets [ 361.636348][ T27] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 361.666607][ T142] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 361.677403][ T9415] block nbd2: shutting down sockets [ 362.026601][ T142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.036875][ T142] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.045878][ T142] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 362.056598][ T142] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.066047][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.086513][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.097164][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.106038][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.117292][ T142] hub 1-1:1.0: bad descriptor, ignoring hub [ 362.124069][ T27] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.125394][ T142] hub: probe of 1-1:1.0 failed with error -5 [ 362.134172][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.140485][ T142] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 362.201031][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 362.207169][ T27] hub: probe of 5-1:1.0 failed with error -5 [ 362.213436][ T27] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 362.437262][ T142] usb 1-1: USB disconnect, device number 17 [ 362.517006][ T14] usb 5-1: USB disconnect, device number 38 02:05:31 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 02:05:31 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f010000000000000000000624"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127b) 02:05:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125e) 02:05:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:31 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127f) 02:05:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127c) 02:05:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125f) 02:05:31 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x541b) [ 362.959182][ T9424] block nbd5: NBD_DISCONNECT [ 362.964762][ T9424] block nbd5: Disconnected due to user request. [ 362.971784][ T9424] block nbd5: shutting down sockets [ 362.976768][ T9420] block nbd1: shutting down sockets [ 362.984396][ T9421] block nbd3: shutting down sockets [ 362.989868][ T9422] block nbd2: shutting down sockets [ 363.039593][ T9432] block nbd5: NBD_DISCONNECT [ 363.044259][ T9432] block nbd5: Disconnected due to user request. [ 363.065237][ T9432] block nbd5: shutting down sockets 02:05:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1260) 02:05:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 363.086715][ T9433] block nbd3: shutting down sockets [ 363.117157][ T9435] block nbd1: shutting down sockets [ 363.122792][ T9437] block nbd2: shutting down sockets [ 363.128661][ T3715] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 363.167711][ T9439] block nbd3: shutting down sockets [ 363.218433][ T9442] block nbd5: NBD_DISCONNECT [ 363.223148][ T9442] block nbd5: Disconnected due to user request. [ 363.229898][ T27] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 363.237870][ T9442] block nbd5: shutting down sockets [ 363.546781][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.557423][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.566527][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 363.577138][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 363.586177][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.652005][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 363.658014][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.668587][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 363.674824][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 363.681294][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.690194][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.705678][ T27] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 363.714822][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.767889][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 363.773942][ T27] hub: probe of 5-1:1.0 failed with error -5 [ 363.780346][ T27] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 363.967480][ T14] usb 1-1: USB disconnect, device number 18 [ 364.087349][ T27] usb 5-1: USB disconnect, device number 39 02:05:32 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) 02:05:32 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5421) 02:05:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127d) 02:05:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1261) 02:05:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1262) [ 364.527147][ T9448] block nbd3: shutting down sockets [ 364.528534][ T9447] block nbd5: NBD_DISCONNECT [ 364.543913][ T9447] block nbd5: Disconnected due to user request. [ 364.546935][ T9449] block nbd1: shutting down sockets [ 364.567613][ T9446] block nbd2: shutting down sockets 02:05:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127e) 02:05:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 364.573716][ T9447] block nbd5: shutting down sockets 02:05:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5450) 02:05:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1263) [ 364.623236][ T9456] block nbd3: shutting down sockets [ 364.636561][ T27] usb 1-1: new low-speed USB device number 19 using dummy_hcd 02:05:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127f) [ 364.686994][ T9458] block nbd1: shutting down sockets [ 364.689830][ T9461] block nbd5: NBD_DISCONNECT [ 364.697700][ T9462] block nbd2: shutting down sockets [ 364.703131][ T9461] block nbd5: Disconnected due to user request. [ 364.703320][ T9463] block nbd3: shutting down sockets [ 364.718759][ T9461] block nbd5: shutting down sockets [ 364.779064][ T142] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 364.794251][ T9466] block nbd1: shutting down sockets [ 365.086588][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.096973][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 365.106030][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 365.123186][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 365.134117][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.146410][ T142] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.156907][ T142] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 365.166174][ T142] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.179203][ T142] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 365.188946][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.207533][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 365.213473][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 365.223245][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 365.243699][ T142] hub 5-1:1.0: bad descriptor, ignoring hub [ 365.249865][ T142] hub: probe of 5-1:1.0 failed with error -5 [ 365.256130][ T142] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 365.527349][ T27] usb 1-1: USB disconnect, device number 19 [ 365.568517][ T3715] usb 5-1: USB disconnect, device number 40 02:05:34 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) 02:05:34 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5451) 02:05:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1264) 02:05:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x541b) 02:05:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5452) 02:05:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5421) [ 366.007345][ T9471] block nbd1: shutting down sockets [ 366.008068][ T9470] block nbd2: shutting down sockets [ 366.019814][ T9472] block nbd3: shutting down sockets [ 366.036421][ T9475] block nbd5: NBD_DISCONNECT [ 366.041532][ T9475] block nbd5: Disconnected due to user request. 02:05:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1265) [ 366.067140][ T9475] block nbd5: shutting down sockets 02:05:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5460) [ 366.133535][ T9480] block nbd1: shutting down sockets [ 366.139163][ T9482] block nbd2: shutting down sockets [ 366.168483][ T9486] block nbd3: shutting down sockets [ 366.177968][ T9485] block nbd5: NBD_DISCONNECT 02:05:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5450) [ 366.182988][ T9485] block nbd5: Disconnected due to user request. [ 366.208328][ T9485] block nbd5: shutting down sockets [ 366.226986][ T6] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 366.257601][ T9490] block nbd1: shutting down sockets [ 366.257655][ T9489] block nbd2: shutting down sockets [ 366.272559][ T3715] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 366.586459][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.596763][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.605633][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 366.616214][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 366.625717][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.666566][ T3715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.677472][ T3715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.677911][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 366.686733][ T3715] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.698230][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 366.705654][ T3715] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 366.711759][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 366.725323][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.791484][ T3715] hub 5-1:1.0: bad descriptor, ignoring hub [ 366.797451][ T3715] hub: probe of 5-1:1.0 failed with error -5 [ 366.803672][ T3715] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 366.997307][ T14] usb 1-1: USB disconnect, device number 20 [ 367.107594][ T6] usb 5-1: USB disconnect, device number 41 02:05:35 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x18) 02:05:35 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1267) 02:05:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x8933) 02:05:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5451) 02:05:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab00) 02:05:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5452) [ 367.538022][ T9498] block nbd2: shutting down sockets [ 367.543735][ T9495] block nbd1: shutting down sockets [ 367.552139][ T9501] block nbd5: NBD_DISCONNECT [ 367.557401][ T9496] block nbd3: shutting down sockets [ 367.568416][ T9501] block nbd5: Disconnected due to user request. [ 367.577550][ T9501] block nbd5: shutting down sockets 02:05:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1268) 02:05:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x48, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5460) 02:05:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab01) [ 367.676434][ T6] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 367.687069][ T9506] block nbd2: shutting down sockets [ 367.687069][ T9505] block nbd1: shutting down sockets [ 367.687856][ T9507] block nbd3: shutting down sockets [ 367.718540][ T9512] block nbd5: NBD_DISCONNECT [ 367.743277][ T9512] block nbd5: Disconnected due to user request. [ 367.757838][ T9513] block nbd2: shutting down sockets [ 367.761849][ T9512] block nbd5: shutting down sockets [ 367.776776][ T9514] block nbd1: shutting down sockets [ 367.796402][ T3682] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 368.036503][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.047085][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.055997][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 368.066743][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 368.075777][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.127579][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 368.133529][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 368.143719][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 368.166516][ T3682] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.177458][ T3682] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.186535][ T3682] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.199481][ T3682] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 368.210342][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.258076][ T3682] hub 5-1:1.0: bad descriptor, ignoring hub [ 368.264142][ T3682] hub: probe of 5-1:1.0 failed with error -5 [ 368.274578][ T3682] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 368.446962][ T3682] usb 1-1: USB disconnect, device number 21 [ 368.578591][ T3715] usb 5-1: USB disconnect, device number 42 02:05:37 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0) 02:05:37 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4c, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1269) 02:05:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x8933) 02:05:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab04) 02:05:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1274) 02:05:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 369.028716][ T9524] block nbd5: NBD_DISCONNECT [ 369.033839][ T9524] block nbd5: Disconnected due to user request. [ 369.046568][ T9524] block nbd5: shutting down sockets [ 369.047551][ T9520] block nbd2: shutting down sockets [ 369.051979][ T9522] block nbd3: shutting down sockets [ 369.066515][ T9521] block nbd1: shutting down sockets 02:05:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab00) [ 369.136502][ T27] usb 1-1: new low-speed USB device number 22 using dummy_hcd 02:05:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab05) [ 369.177863][ T9532] block nbd3: shutting down sockets [ 369.184122][ T9536] block nbd5: NBD_DISCONNECT [ 369.186853][ T9539] block nbd2: shutting down sockets [ 369.191397][ T9537] block nbd1: shutting down sockets [ 369.216486][ T9536] block nbd5: Disconnected due to user request. 02:05:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1276) [ 369.245392][ T9536] block nbd5: shutting down sockets [ 369.285088][ T9541] block nbd3: shutting down sockets [ 369.301296][ T9540] block nbd2: shutting down sockets [ 369.316355][ T3679] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 369.587754][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.598083][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.607128][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 369.617815][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 369.626888][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.687526][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 369.693665][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 369.700293][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 369.736532][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.748685][ T3679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.758033][ T3679] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 369.768771][ T3679] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 369.778088][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.847308][ T3679] hub 5-1:1.0: bad descriptor, ignoring hub [ 369.853482][ T3679] hub: probe of 5-1:1.0 failed with error -5 [ 369.863775][ T3679] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 370.006992][ T3682] usb 1-1: USB disconnect, device number 22 [ 370.168813][ T3682] usb 5-1: USB disconnect, device number 43 02:05:38 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x700) 02:05:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x68, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab01) 02:05:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1277) 02:05:39 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab06) 02:05:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1278) [ 370.626925][ T9549] block nbd2: shutting down sockets [ 370.626967][ T9548] block nbd3: shutting down sockets [ 370.643081][ T9553] block nbd5: NBD_DISCONNECT [ 370.648216][ T9547] block nbd1: shutting down sockets [ 370.662803][ T9553] block nbd5: Disconnected due to user request. 02:05:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab07) [ 370.676773][ T9553] block nbd5: shutting down sockets [ 370.692234][ T3679] usb 1-1: new low-speed USB device number 23 using dummy_hcd 02:05:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1279) 02:05:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab04) [ 370.756859][ T9559] block nbd3: shutting down sockets [ 370.767407][ T9563] block nbd1: shutting down sockets [ 370.777341][ T9561] block nbd2: shutting down sockets [ 370.838412][ T9567] block nbd5: NBD_DISCONNECT [ 370.843500][ T9567] block nbd5: Disconnected due to user request. [ 370.846716][ T6] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 370.853265][ T9567] block nbd5: shutting down sockets [ 370.863032][ T9569] block nbd3: shutting down sockets [ 370.927029][ T9573] block nbd1: shutting down sockets [ 371.106508][ T3679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.116848][ T3679] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 371.125753][ T3679] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 371.136311][ T3679] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 371.145349][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.187872][ T3679] hub 1-1:1.0: bad descriptor, ignoring hub [ 371.193829][ T3679] hub: probe of 1-1:1.0 failed with error -5 [ 371.206052][ T3679] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 371.226522][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.236764][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 371.245657][ T6] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 371.256584][ T6] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 371.265614][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.307417][ T6] hub 5-1:1.0: bad descriptor, ignoring hub [ 371.313358][ T6] hub: probe of 5-1:1.0 failed with error -5 [ 371.324003][ T6] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 371.508251][ T6] usb 1-1: USB disconnect, device number 23 [ 371.636572][ T3679] usb 5-1: USB disconnect, device number 44 02:05:40 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1800) 02:05:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab08) 02:05:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127a) 02:05:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x74, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:40 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab05) 02:05:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127b) 02:05:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7a, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab09) [ 371.948225][ T9577] block nbd5: NBD_DISCONNECT [ 371.953578][ T9577] block nbd5: Disconnected due to user request. [ 371.959885][ T9577] block nbd5: shutting down sockets [ 371.966831][ T9579] block nbd2: NBD_DISCONNECT [ 371.966854][ T9576] block nbd3: shutting down sockets [ 371.971936][ T9574] block nbd2: Disconnected due to user request. [ 371.989296][ T9574] block nbd2: shutting down sockets [ 372.086800][ T9582] block nbd1: shutting down sockets 02:05:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab0a) 02:05:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab06) 02:05:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127c) [ 372.107001][ T9588] block nbd2: shutting down sockets [ 372.112481][ T9593] block nbd5: NBD_DISCONNECT [ 372.117664][ T9593] block nbd5: Disconnected due to user request. [ 372.124002][ T9593] block nbd5: shutting down sockets [ 372.129769][ T9585] block nbd3: shutting down sockets [ 372.216342][ T6] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 372.236982][ T9595] block nbd1: shutting down sockets [ 372.260284][ T9598] block nbd2: shutting down sockets [ 372.273215][ T9597] block nbd3: shutting down sockets [ 372.356448][ T3679] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 372.596492][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.606940][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.621363][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 372.631998][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 372.644797][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.697734][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 372.703739][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 372.711002][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 372.776421][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.796025][ T3679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.804970][ T3679] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 372.816062][ T3679] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 372.825184][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.867760][ T3679] hub 5-1:1.0: bad descriptor, ignoring hub [ 372.873868][ T3679] hub: probe of 5-1:1.0 failed with error -5 [ 372.881269][ T3679] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 373.027497][ T3715] usb 1-1: USB disconnect, device number 24 [ 373.189123][ T3715] usb 5-1: USB disconnect, device number 45 02:05:41 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1f00) 02:05:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab07) 02:05:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400448c9) [ 373.457098][ T9604] block nbd1: shutting down sockets [ 373.476893][ T9605] block nbd2: shutting down sockets [ 373.478102][ T9608] block nbd5: NBD_DISCONNECT [ 373.507368][ T9608] block nbd5: Disconnected due to user request. [ 373.514063][ T9608] block nbd5: shutting down sockets 02:05:42 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab08) 02:05:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127d) 02:05:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400448dd) 02:05:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127e) [ 373.617386][ T9611] block nbd3: shutting down sockets [ 373.626752][ T9616] block nbd1: NBD_DISCONNECT [ 373.633245][ T9613] block nbd2: shutting down sockets [ 373.643111][ T9612] block nbd1: Disconnected due to user request. [ 373.650848][ T9618] block nbd5: NBD_DISCONNECT 02:05:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab09) 02:05:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400454ca) [ 373.662934][ T9612] block nbd1: shutting down sockets [ 373.671252][ T9618] block nbd5: Disconnected due to user request. [ 373.682026][ T9618] block nbd5: shutting down sockets [ 373.727034][ T9621] block nbd3: shutting down sockets [ 373.736668][ T3715] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 373.762095][ T9624] block nbd1: shutting down sockets [ 373.768190][ T9623] block nbd2: shutting down sockets [ 373.890250][ T27] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 374.156565][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.166903][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.175843][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 374.186410][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 374.195539][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.258031][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 374.264143][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 374.270568][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 374.306497][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.317511][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.326918][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.336702][ T27] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 374.345724][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.397608][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 374.403541][ T27] hub: probe of 5-1:1.0 failed with error -5 [ 374.413531][ T27] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 374.578438][ T3715] usb 1-1: USB disconnect, device number 25 [ 374.718210][ T14] usb 5-1: USB disconnect, device number 46 02:05:43 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3f00) 02:05:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127f) 02:05:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40049409) [ 375.017329][ T9628] block nbd3: shutting down sockets [ 375.037444][ T9629] block nbd2: shutting down sockets [ 375.045085][ T9631] block nbd5: NBD_DISCONNECT [ 375.049902][ T9631] block nbd5: Disconnected due to user request. [ 375.056221][ T9631] block nbd5: shutting down sockets 02:05:43 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab0a) 02:05:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x541b) 02:05:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40081271) 02:05:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5421) [ 375.146948][ T9636] block nbd3: shutting down sockets [ 375.166708][ T9643] block nbd2: shutting down sockets [ 375.168386][ T9641] block nbd5: NBD_DISCONNECT [ 375.172822][ T9637] block nbd1: shutting down sockets [ 375.177362][ T9641] block nbd5: Disconnected due to user request. 02:05:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40086602) 02:05:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400448c9) [ 375.196061][ T9641] block nbd5: shutting down sockets [ 375.216752][ T9646] block nbd3: shutting down sockets [ 375.256382][ T6] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 375.289409][ T9648] block nbd2: shutting down sockets [ 375.306997][ T9650] block nbd1: shutting down sockets [ 375.406443][ T14] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 375.616674][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.627420][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.636388][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 375.647137][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 375.656177][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.708231][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 375.714296][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 375.720991][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 375.766820][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.777276][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.788184][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.798047][ T14] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 375.807168][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.857527][ T14] hub 5-1:1.0: bad descriptor, ignoring hub [ 375.864117][ T14] hub: probe of 5-1:1.0 failed with error -5 [ 375.871294][ T14] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 376.031552][ T14] usb 1-1: USB disconnect, device number 26 [ 376.187127][ T3715] usb 5-1: USB disconnect, device number 47 02:05:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x700, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5450) 02:05:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101283) 02:05:44 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf000) [ 376.467227][ T9654] block nbd2: shutting down sockets [ 376.468435][ T9653] block nbd3: shutting down sockets [ 376.480151][ T9656] block nbd5: NBD_DISCONNECT [ 376.490442][ T9656] block nbd5: Disconnected due to user request. [ 376.505323][ T9656] block nbd5: shutting down sockets 02:05:45 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400448dd) 02:05:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5451) 02:05:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101286) 02:05:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101288) 02:05:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5452) 02:05:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400454ca) [ 376.607598][ T9664] block nbd3: shutting down sockets [ 376.608292][ T9660] block nbd2: shutting down sockets [ 376.613236][ T9661] block nbd1: shutting down sockets [ 376.645111][ T9667] block nbd5: NBD_DISCONNECT [ 376.672720][ T9667] block nbd5: Disconnected due to user request. [ 376.686475][ T9667] block nbd5: shutting down sockets 02:05:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x1100, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070c9) 02:05:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5460) [ 376.719311][ T9671] block nbd2: shutting down sockets [ 376.721756][ T14] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 376.747095][ T9675] block nbd3: shutting down sockets [ 376.747336][ T9673] block nbd1: shutting down sockets [ 376.828491][ T9678] block nbd2: shutting down sockets [ 376.846740][ T9681] block nbd3: shutting down sockets [ 376.852510][ T9679] block nbd5: NBD_DISCONNECT [ 376.857512][ T9679] block nbd5: Disconnected due to user request. [ 376.863748][ T9679] block nbd5: shutting down sockets [ 376.886413][ T3715] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 377.086417][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.096928][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.106042][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 377.117210][ T14] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 377.126360][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.179471][ T14] hub 1-1:1.0: bad descriptor, ignoring hub [ 377.185949][ T14] hub: probe of 1-1:1.0 failed with error -5 [ 377.192460][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 377.306467][ T3715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.317068][ T3715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.327147][ T3715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.336903][ T3715] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 377.346020][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.407469][ T3715] hub 5-1:1.0: bad descriptor, ignoring hub [ 377.413781][ T3715] hub: probe of 5-1:1.0 failed with error -5 [ 377.422081][ T3715] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 377.508120][ T3679] usb 1-1: USB disconnect, device number 27 [ 377.739273][ T3679] usb 5-1: USB disconnect, device number 48 02:05:46 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0ffff) [ 377.918271][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.924917][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 02:05:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x15bd, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:46 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070ca) 02:05:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40049409) 02:05:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x8933) 02:05:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101286) [ 378.166990][ T9686] block nbd3: shutting down sockets 02:05:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab00) 02:05:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40081271) [ 378.188575][ T9692] block nbd5: NBD_DISCONNECT [ 378.189897][ T9685] block nbd1: shutting down sockets [ 378.193564][ T9692] block nbd5: Disconnected due to user request. [ 378.199446][ T9687] block nbd2: shutting down sockets [ 378.211572][ T27] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 378.216861][ T9692] block nbd5: shutting down sockets 02:05:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:46 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070cd) 02:05:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x8933) [ 378.297399][ T9693] block nbd4: shutting down sockets [ 378.306690][ T9696] block nbd3: shutting down sockets 02:05:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab01) [ 378.378495][ T9703] block nbd5: NBD_DISCONNECT [ 378.384024][ T9703] block nbd5: Disconnected due to user request. [ 378.384217][ T9699] block nbd1: shutting down sockets [ 378.396543][ T9702] block nbd2: shutting down sockets [ 378.399750][ T9703] block nbd5: shutting down sockets [ 378.402621][ T9705] block nbd4: shutting down sockets [ 378.466979][ T9709] block nbd3: shutting down sockets [ 378.646637][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.657198][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.666471][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 378.677444][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 378.686605][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.747469][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 378.754173][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 378.760676][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 379.077672][ T27] usb 1-1: USB disconnect, device number 28 02:05:47 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1000000) 02:05:47 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40186366) 02:05:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40086602) 02:05:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab04) 02:05:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870c8) [ 379.510768][ T9717] block nbd4: NBD_DISCONNECT [ 379.515798][ T9717] block nbd4: Disconnected due to user request. [ 379.522911][ T9714] block nbd3: shutting down sockets [ 379.523177][ T9713] block nbd2: shutting down sockets [ 379.533735][ T9715] block nbd1: shutting down sockets [ 379.540388][ T9717] block nbd4: shutting down sockets 02:05:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101283) 02:05:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7a, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x3e80, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 379.564405][ T9720] block nbd5: NBD_DISCONNECT [ 379.572985][ T9720] block nbd5: Disconnected due to user request. [ 379.599814][ T9720] block nbd5: shutting down sockets [ 379.646684][ T9724] block nbd3: shutting down sockets 02:05:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab05) [ 379.667119][ T9725] block nbd2: shutting down sockets [ 379.672836][ T9727] block nbd1: shutting down sockets [ 379.719160][ T9730] block nbd4: NBD_DISCONNECT [ 379.724354][ T9730] block nbd4: Disconnected due to user request. [ 379.733354][ T9733] block nbd3: shutting down sockets [ 379.746463][ T9730] block nbd4: shutting down sockets [ 379.770535][ T9732] block nbd5: NBD_DISCONNECT [ 379.775622][ T9732] block nbd5: Disconnected due to user request. [ 379.785253][ T9732] block nbd5: shutting down sockets [ 379.799445][ T27] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 380.186533][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.196746][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.205882][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 380.216364][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 380.225733][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.277467][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 380.283954][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 380.291139][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 380.606706][ T27] usb 1-1: USB disconnect, device number 29 02:05:49 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 02:05:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101286) 02:05:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cb) 02:05:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab06) 02:05:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x3f00, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101288) 02:05:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab07) [ 381.066848][ T9735] block nbd1: shutting down sockets [ 381.076723][ T9739] block nbd3: shutting down sockets [ 381.076727][ T9747] block nbd4: NBD_DISCONNECT [ 381.076779][ T9747] block nbd4: Disconnected due to user request. [ 381.096435][ T9736] block nbd2: shutting down sockets [ 381.101229][ T9747] block nbd4: shutting down sockets 02:05:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cc) [ 381.138365][ T9738] block nbd5: shutting down sockets 02:05:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1274) 02:05:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070c9) 02:05:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4800, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 381.193715][ T9749] block nbd1: shutting down sockets [ 381.237097][ T9754] block nbd2: shutting down sockets [ 381.247739][ T9752] block nbd3: shutting down sockets [ 381.276945][ T9756] block nbd4: shutting down sockets [ 381.278209][ T9760] block nbd5: NBD_DISCONNECT [ 381.296429][ T6] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 381.300061][ T9760] block nbd5: Disconnected due to user request. [ 381.304314][ T9762] block nbd1: shutting down sockets [ 381.323134][ T9760] block nbd5: shutting down sockets [ 381.686562][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.696815][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 381.705879][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 381.716682][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 381.726306][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.777736][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 381.784067][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 381.790674][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 382.099057][ T27] usb 1-1: USB disconnect, device number 30 02:05:50 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4000000) 02:05:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401c5820) 02:05:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab08) 02:05:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070ca) 02:05:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4c00, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070cd) 02:05:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4020940d) [ 382.547473][ T9768] block nbd3: NBD_DISCONNECT [ 382.552720][ T9769] block nbd1: shutting down sockets [ 382.554203][ T9771] block nbd5: NBD_DISCONNECT [ 382.558764][ T9767] block nbd4: shutting down sockets [ 382.568443][ T9766] block nbd3: Disconnected due to user request. [ 382.574828][ T9766] block nbd3: shutting down sockets [ 382.576858][ T9765] block nbd2: shutting down sockets [ 382.588566][ T9771] block nbd5: Disconnected due to user request. 02:05:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab09) 02:05:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) [ 382.606359][ T9771] block nbd5: shutting down sockets 02:05:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 382.662047][ T9776] block nbd1: shutting down sockets 02:05:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40186366) [ 382.706815][ T9778] block nbd2: shutting down sockets [ 382.717173][ T9780] block nbd3: shutting down sockets [ 382.720414][ T9779] block nbd4: shutting down sockets [ 382.738355][ T9786] block nbd5: NBD_DISCONNECT [ 382.743024][ T9786] block nbd5: Disconnected due to user request. [ 382.764865][ T9786] block nbd5: shutting down sockets [ 382.776968][ T9785] block nbd1: shutting down sockets [ 382.786496][ T3682] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 383.146680][ T3682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.161658][ T3682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 383.170587][ T3682] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 383.181886][ T3682] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 383.191105][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.237451][ T3682] hub 1-1:1.0: bad descriptor, ignoring hub [ 383.243366][ T3682] hub: probe of 1-1:1.0 failed with error -5 [ 383.249839][ T3682] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 383.567892][ T3715] usb 1-1: USB disconnect, device number 31 02:05:52 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7000000) 02:05:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab0a) 02:05:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80041284) 02:05:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6800, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870c8) 02:05:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80041285) [ 383.996753][ T9790] block nbd2: shutting down sockets 02:05:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400448c9) [ 384.018786][ T9795] block nbd5: NBD_DISCONNECT [ 384.022910][ T9788] block nbd4: shutting down sockets [ 384.026473][ T9795] block nbd5: Disconnected due to user request. [ 384.036955][ T9791] block nbd3: shutting down sockets [ 384.042800][ T9792] block nbd1: shutting down sockets [ 384.057068][ T9795] block nbd5: shutting down sockets 02:05:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cb) 02:05:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) [ 384.108511][ T9800] block nbd2: shutting down sockets [ 384.189168][ T9805] block nbd3: shutting down sockets [ 384.206606][ T9804] block nbd1: shutting down sockets [ 384.228602][ T9811] block nbd5: NBD_DISCONNECT [ 384.233248][ T9811] block nbd5: Disconnected due to user request. [ 384.243342][ T9811] block nbd5: shutting down sockets [ 384.256497][ T3683] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 384.616508][ T3683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.626747][ T3683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.635618][ T3683] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 384.646285][ T3683] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.655343][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.697311][ T3683] hub 1-1:1.0: bad descriptor, ignoring hub [ 384.703258][ T3683] hub: probe of 1-1:1.0 failed with error -5 [ 384.709687][ T3683] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 385.016554][ T27] usb 1-1: USB disconnect, device number 32 02:05:53 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000) 02:05:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081270) 02:05:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cc) 02:05:53 executing program 4: ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab02) 02:05:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400448dd) 02:05:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7400, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:53 executing program 4: ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab02) 02:05:53 executing program 4: ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab02) 02:05:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x400454ca) 02:05:53 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401c5820) [ 385.482807][ T9813] block nbd1: shutting down sockets [ 385.488810][ T9815] block nbd3: shutting down sockets [ 385.516932][ T9812] block nbd2: shutting down sockets 02:05:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081272) [ 385.533338][ T9821] block nbd5: NBD_DISCONNECT [ 385.557746][ T9821] block nbd5: Disconnected due to user request. [ 385.584599][ T9821] block nbd5: shutting down sockets [ 385.606822][ T9830] block nbd3: shutting down sockets [ 385.606865][ T9829] block nbd1: shutting down sockets [ 385.633687][ T9835] block nbd2: shutting down sockets [ 385.756528][ T3715] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 386.177220][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.187369][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.196342][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 386.206845][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 386.215879][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.278337][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 386.284330][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 386.290831][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 386.596773][ T27] usb 1-1: USB disconnect, device number 33 02:05:55 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x18000000) 02:05:55 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) 02:05:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40049409) 02:05:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7a00, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081280) 02:05:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4020940d) 02:05:55 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) [ 387.027032][ T9840] block nbd1: shutting down sockets [ 387.047690][ T9841] block nbd2: shutting down sockets 02:05:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80041284) 02:05:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086301) 02:05:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab02) 02:05:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40081271) [ 387.075717][ T9842] block nbd5: NBD_DISCONNECT [ 387.087040][ T9838] block nbd3: shutting down sockets [ 387.106797][ T9842] block nbd5: Disconnected due to user request. [ 387.113079][ T9842] block nbd5: shutting down sockets 02:05:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x803e, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 387.147324][ T9852] block nbd1: shutting down sockets [ 387.156892][ T9855] block nbd2: shutting down sockets [ 387.218575][ T9859] block nbd3: shutting down sockets [ 387.224648][ T9862] block nbd5: NBD_DISCONNECT [ 387.233775][ T9862] block nbd5: Disconnected due to user request. [ 387.243443][ T9862] block nbd5: shutting down sockets [ 387.346462][ T27] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 387.756484][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.767989][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 387.777284][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 387.788317][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 387.797448][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.857776][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 387.863719][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 387.871427][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 388.176839][ T27] usb 1-1: USB disconnect, device number 34 02:05:57 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1f000000) 02:05:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab02) 02:05:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086601) 02:05:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40086602) 02:05:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80041285) 02:05:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xbd15, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab02) [ 388.626758][ T9863] block nbd2: shutting down sockets [ 388.627099][ T9866] block nbd3: shutting down sockets [ 388.633466][ T9869] block nbd5: NBD_DISCONNECT [ 388.637561][ T9867] block nbd1: shutting down sockets 02:05:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081270) 02:05:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101283) 02:05:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x801c581f) 02:05:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7400, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 388.668592][ T9869] block nbd5: Disconnected due to user request. [ 388.716979][ T9869] block nbd5: shutting down sockets 02:05:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 388.747299][ T9877] block nbd2: shutting down sockets [ 388.772761][ T9880] block nbd4: NBD_DISCONNECT [ 388.784927][ T9880] block nbd4: Disconnected due to user request. [ 388.792386][ T9882] block nbd3: shutting down sockets [ 388.794141][ T9880] block nbd4: shutting down sockets [ 388.797977][ T9881] block nbd1: shutting down sockets [ 388.858255][ T9886] block nbd5: NBD_DISCONNECT [ 388.863987][ T9886] block nbd5: Disconnected due to user request. [ 388.872695][ T9886] block nbd5: shutting down sockets [ 388.896395][ T3715] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 389.286457][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.296961][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 389.306355][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 389.317029][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 389.326054][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.387645][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 389.393574][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 389.401139][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 389.717364][ T27] usb 1-1: USB disconnect, device number 35 02:05:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081272) 02:05:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) 02:05:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101286) 02:05:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4800, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:58 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3f000000) 02:05:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:05:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101288) [ 390.146858][ T9889] block nbd1: shutting down sockets [ 390.166706][ T9890] block nbd3: shutting down sockets [ 390.173409][ T9888] block nbd2: shutting down sockets [ 390.187668][ T9893] block nbd4: NBD_DISCONNECT 02:05:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081280) 02:05:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) [ 390.197131][ T9893] block nbd4: Disconnected due to user request. [ 390.224680][ T9893] block nbd4: shutting down sockets 02:05:58 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:05:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070c9) 02:05:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 390.254625][ T9887] block nbd5: shutting down sockets [ 390.266671][ T9900] block nbd3: shutting down sockets [ 390.286912][ T9899] block nbd1: shutting down sockets 02:05:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086301) 02:05:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0101282) 02:05:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 390.327456][ T9904] block nbd2: shutting down sockets [ 390.345491][ T9910] block nbd5: NBD_DISCONNECT [ 390.354195][ T9910] block nbd5: Disconnected due to user request. [ 390.367735][ T9910] block nbd5: shutting down sockets 02:05:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0189436) [ 390.406505][ T6] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 390.406595][ T9913] block nbd2: shutting down sockets [ 390.414463][ T9911] block nbd3: shutting down sockets [ 390.437099][ T9915] block nbd1: shutting down sockets [ 390.497201][ T9922] block nbd5: NBD_DISCONNECT [ 390.502067][ T9922] block nbd5: Disconnected due to user request. [ 390.511496][ T9922] block nbd5: shutting down sockets [ 390.527136][ T9920] block nbd2: shutting down sockets [ 390.586373][ T27] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 390.766434][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.776944][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 390.785874][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 390.796968][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 390.806087][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.847805][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 390.853854][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 390.860370][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 391.006408][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.016764][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.025692][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.039151][ T27] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.049536][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.107526][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 391.113561][ T27] hub: probe of 5-1:1.0 failed with error -5 [ 391.126092][ T27] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 391.167587][ T6] usb 1-1: USB disconnect, device number 36 [ 391.438835][ T27] usb 5-1: USB disconnect, device number 49 02:05:59 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf6ffffff) 02:05:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086601) 02:05:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070ca) 02:06:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xe0ffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc020660b) [ 391.609012][ T9927] block nbd5: NBD_DISCONNECT [ 391.614015][ T9927] block nbd5: Disconnected due to user request. [ 391.616826][ T9924] block nbd1: shutting down sockets [ 391.621113][ T9923] block nbd3: shutting down sockets [ 391.625882][ T9926] block nbd2: shutting down sockets [ 391.631238][ T9927] block nbd5: shutting down sockets 02:06:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x801c581f) 02:06:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070cd) 02:06:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0481273) 02:06:00 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3f000000) 02:06:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) 02:06:00 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x20) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 391.886613][ T27] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 391.886943][ T9934] block nbd3: shutting down sockets [ 391.894600][ T9933] block nbd1: shutting down sockets [ 391.900860][ T9938] block nbd5: NBD_DISCONNECT [ 391.904865][ T9935] block nbd2: shutting down sockets [ 391.914480][ T9938] block nbd5: Disconnected due to user request. [ 391.941967][ T9938] block nbd5: shutting down sockets [ 392.026973][ T9943] block nbd1: shutting down sockets [ 392.146758][ T3684] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 392.346608][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.357607][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.366535][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 392.377990][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 392.387051][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.447564][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 392.453506][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 392.459944][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 392.556494][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.566965][ T3684] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.576571][ T3684] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 392.591479][ T3684] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 392.600547][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.654662][ T3684] hub 5-1:1.0: bad descriptor, ignoring hub [ 392.660900][ T3684] hub: probe of 5-1:1.0 failed with error -5 [ 392.671262][ T3684] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 392.766504][ T6] usb 1-1: USB disconnect, device number 37 [ 392.811192][ T3636] block nbd2: Receive control failed (result -32) [ 392.811399][ T9945] block nbd2: shutting down sockets [ 392.977538][ T6] usb 5-1: USB disconnect, device number 50 02:06:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40186366) 02:06:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) 02:06:01 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffff000) 02:06:01 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x20) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0101282) 02:06:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870c8) 02:06:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 393.217382][ T9948] block nbd3: shutting down sockets [ 393.225739][ T9953] block nbd5: NBD_DISCONNECT [ 393.226549][ T9949] block nbd1: shutting down sockets [ 393.232158][ T9953] block nbd5: Disconnected due to user request. [ 393.249207][ T9953] block nbd5: shutting down sockets [ 393.307105][ T9958] block nbd1: shutting down sockets [ 393.310634][ T9960] block nbd3: shutting down sockets 02:06:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0101282) 02:06:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0189436) 02:06:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cb) 02:06:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 393.358315][ T9963] block nbd5: NBD_DISCONNECT [ 393.362992][ T9963] block nbd5: Disconnected due to user request. [ 393.370114][ T9963] block nbd5: shutting down sockets 02:06:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc020660b) [ 393.427649][ T9964] block nbd1: shutting down sockets [ 393.446754][ T9965] block nbd3: shutting down sockets [ 393.447065][ T9968] block nbd4: shutting down sockets [ 393.468455][ T14] usb 1-1: new low-speed USB device number 38 using dummy_hcd 02:06:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cc) 02:06:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127d) [ 393.478859][ T9971] block nbd5: NBD_DISCONNECT [ 393.495255][ T9971] block nbd5: Disconnected due to user request. [ 393.505065][ T9971] block nbd5: shutting down sockets [ 393.517052][ T9972] block nbd1: shutting down sockets [ 393.527527][ T9975] block nbd3: shutting down sockets [ 393.533425][ T9977] block nbd4: shutting down sockets [ 393.836570][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.846943][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 393.855788][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 393.866299][ T14] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 393.875369][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.927453][ T14] hub 1-1:1.0: bad descriptor, ignoring hub [ 393.933627][ T14] hub: probe of 1-1:1.0 failed with error -5 [ 393.943764][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 394.015617][ T3636] block nbd2: Receive control failed (result -32) [ 394.015876][ T9954] block nbd2: shutting down sockets [ 394.248257][ T14] usb 1-1: USB disconnect, device number 38 02:06:03 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff6) 02:06:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0481273) 02:06:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) (fail_nth: 1) 02:06:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401c5820) 02:06:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x20) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) creat(&(0x7f0000000000)='./file0\x00', 0x20) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) [ 394.667290][ T9987] FAULT_INJECTION: forcing a failure. [ 394.667290][ T9987] name failslab, interval 1, probability 0, space 0, times 0 [ 394.686908][ T9981] block nbd3: shutting down sockets [ 394.687336][ T9987] CPU: 1 PID: 9987 Comm: syz-executor.4 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 394.692462][ T9984] block nbd1: shutting down sockets [ 394.702493][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.702507][ T9987] Call Trace: [ 394.702515][ T9987] [ 394.702522][ T9987] dump_stack_lvl+0xcd/0x134 [ 394.702555][ T9987] should_fail.cold+0x5/0xa [ 394.702581][ T9987] should_failslab+0x5/0x10 [ 394.702606][ T9987] __kmalloc+0x7e/0x350 [ 394.702625][ T9987] ? tomoyo_realpath_from_path+0xc3/0x620 [ 394.702656][ T9987] tomoyo_realpath_from_path+0xc3/0x620 [ 394.752893][ T9987] ? tomoyo_profile+0x42/0x50 [ 394.757569][ T9987] tomoyo_path_number_perm+0x1d5/0x590 [ 394.763040][ T9987] ? tomoyo_path_number_perm+0x18d/0x590 [ 394.768671][ T9987] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 394.774475][ T9987] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 394.780472][ T9987] ? __context_tracking_exit+0xb8/0xe0 [ 394.785927][ T9987] ? __fget_files+0x286/0x470 [ 394.790629][ T9987] security_file_ioctl+0x50/0xb0 [ 394.795568][ T9987] __x64_sys_ioctl+0xb3/0x200 [ 394.800240][ T9987] do_syscall_64+0x35/0xb0 [ 394.804662][ T9987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 394.810549][ T9987] RIP: 0033:0x7f318b6890e9 [ 394.814951][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 394.834638][ T9987] RSP: 002b:00007f318c812168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.843047][ T9987] RAX: ffffffffffffffda RBX: 00007f318b79bf60 RCX: 00007f318b6890e9 [ 394.851002][ T9987] RDX: 0000000000000000 RSI: 000000000000ab02 RDI: 0000000000000003 [ 394.858956][ T9987] RBP: 00007f318c8121d0 R08: 0000000000000000 R09: 0000000000000000 02:06:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4020940d) [ 394.867086][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.875042][ T9987] R13: 00007ffcd94e696f R14: 00007f318c812300 R15: 0000000000022000 [ 394.883014][ T9987] [ 394.896474][ T9987] ERROR: Out of memory at tomoyo_realpath_from_path. 02:06:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x800, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 02:06:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) (fail_nth: 2) [ 394.918018][ T9979] block nbd5: shutting down sockets 02:06:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 394.950869][ T9993] block nbd2: shutting down sockets 02:06:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 394.979399][ T9994] block nbd3: shutting down sockets 02:06:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80041284) [ 395.011636][T10001] block nbd5: NBD_DISCONNECT [ 395.035033][T10001] block nbd5: Disconnected due to user request. [ 395.036420][ T6] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 395.051093][T10001] block nbd5: shutting down sockets [ 395.053988][T10008] FAULT_INJECTION: forcing a failure. [ 395.053988][T10008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.106996][T10006] block nbd3: shutting down sockets [ 395.120027][T10008] CPU: 0 PID: 10008 Comm: syz-executor.4 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 395.130540][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.140594][T10008] Call Trace: [ 395.143869][T10008] [ 395.146794][T10008] dump_stack_lvl+0xcd/0x134 [ 395.151396][T10008] should_fail.cold+0x5/0xa [ 395.155903][T10008] _copy_from_user+0x2a/0x170 [ 395.160584][T10008] kstrtouint_from_user+0xa8/0x190 [ 395.165697][T10008] ? kstrtouint+0x120/0x120 [ 395.170212][T10008] ? lock_release+0x720/0x720 [ 395.174916][T10008] proc_fail_nth_write+0x79/0x220 [ 395.179946][T10008] ? proc_task_getattr+0x1f0/0x1f0 [ 395.185066][T10008] ? proc_task_getattr+0x1f0/0x1f0 [ 395.190185][T10008] vfs_write+0x269/0xac0 [ 395.194523][T10008] ksys_write+0x127/0x250 [ 395.198855][T10008] ? __ia32_sys_read+0xb0/0xb0 [ 395.203626][T10008] ? syscall_enter_from_user_mode+0x21/0x70 [ 395.209536][T10008] do_syscall_64+0x35/0xb0 [ 395.213965][T10008] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 395.219867][T10008] RIP: 0033:0x7f318b63bbff [ 395.224289][T10008] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 395.243902][T10008] RSP: 002b:00007f318c7f1160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 395.252316][T10008] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f318b63bbff [ 395.260290][T10008] RDX: 0000000000000001 RSI: 00007f318c7f11e0 RDI: 0000000000000003 [ 395.268263][T10008] RBP: 00007f318c7f11d0 R08: 0000000000000000 R09: 0000000000000000 [ 395.276237][T10008] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 395.284206][T10008] R13: 00007ffcd94e696f R14: 00007f318c7f1300 R15: 0000000000022000 [ 395.292195][T10008] [ 395.616472][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.626916][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 395.635789][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 395.646559][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 395.660080][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.707424][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 395.713588][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 395.723758][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 395.815508][ T3636] block nbd1: Receive control failed (result -32) [ 395.821626][T10002] block nbd1: shutting down sockets [ 396.028294][ T6] usb 1-1: USB disconnect, device number 39 02:06:04 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1000000000000) 02:06:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80041285) 02:06:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async, rerun: 64) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) (async, rerun: 64) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) 02:06:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x800, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x800, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) 02:06:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x2) 02:06:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081270) 02:06:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x10) [ 396.488591][T10023] block nbd5: NBD_DISCONNECT [ 396.500937][T10023] block nbd5: Disconnected due to user request. [ 396.506460][T10013] block nbd3: shutting down sockets [ 396.525580][T10023] block nbd5: shutting down sockets 02:06:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x301) 02:06:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x800, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x800, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) [ 396.562338][T10030] block nbd1: shutting down sockets [ 396.606867][T10033] block nbd3: shutting down sockets [ 396.638529][T10038] block nbd5: NBD_DISCONNECT [ 396.660450][T10038] block nbd5: Disconnected due to user request. [ 396.669209][T10038] block nbd5: shutting down sockets [ 396.732926][T10042] block nbd1: shutting down sockets [ 396.746503][ T6] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 396.776429][T10043] block nbd1: Device being setup by another task [ 397.106597][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.116807][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 397.126851][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 397.137339][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 397.146429][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.187367][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 397.193321][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 397.199796][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 397.507462][ T6] usb 1-1: USB disconnect, device number 40 02:06:06 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0ffffffffffff) 02:06:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081272) 02:06:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x125d) 02:06:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x8000002b) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pidfd_getfd(0xffffffffffffffff, r4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x125e) 02:06:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081280) [ 397.968642][T10055] block nbd5: NBD_DISCONNECT [ 397.973486][T10055] block nbd5: Disconnected due to user request. [ 397.977316][T10049] block nbd3: shutting down sockets [ 398.001177][T10055] block nbd5: shutting down sockets 02:06:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x125f) 02:06:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x11000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086301) [ 398.116671][T10066] block nbd3: shutting down sockets 02:06:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x400, 0x0, 0x80000000, 0xdd4f, 0x776d82a, r2}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r6, r7, 0x0, 0x8000002b) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 398.209683][T10073] block nbd5: NBD_DISCONNECT [ 398.217241][T10072] block nbd3: shutting down sockets [ 398.226571][T10073] block nbd5: Disconnected due to user request. [ 398.236558][ T3715] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 398.262126][T10073] block nbd5: shutting down sockets [ 398.539701][T10074] block nbd2: shutting down sockets [ 398.676427][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.687544][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 398.697237][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 398.708167][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 398.717268][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.754177][ T3636] block nbd1: Receive control failed (result -32) [ 398.755193][T10065] block nbd1: shutting down sockets [ 398.768101][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 398.774093][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 398.787057][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 399.088673][ T6] usb 1-1: USB disconnect, device number 41 02:06:07 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000000000) 02:06:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1260) 02:06:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086601) 02:06:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x1f000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x400, 0x0, 0x80000000, 0xdd4f, 0x776d82a, r2}) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) r3 = getpid() (rerun: 64) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) (async) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r7, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async, rerun: 64) sendfile(r6, r7, 0x0, 0x8000002b) (rerun: 64) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 02:06:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x8000002b) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pidfd_getfd(0xffffffffffffffff, r4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) (async) sendfile(r1, r2, 0x0, 0x8000002b) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x42) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) pidfd_getfd(0xffffffffffffffff, r4, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 02:06:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1261) 02:06:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1262) 02:06:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x801c581f) [ 399.548279][T10085] block nbd5: NBD_DISCONNECT [ 399.553438][T10080] block nbd3: shutting down sockets [ 399.563919][T10087] block nbd2: shutting down sockets [ 399.588211][T10085] block nbd5: Disconnected due to user request. 02:06:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1263) 02:06:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x400, 0x0, 0x80000000, 0xdd4f, 0x776d82a, r2}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r6, r7, 0x0, 0x8000002b) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) getpid() (async) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x400, 0x0, 0x80000000, 0xdd4f, 0x776d82a, r2}) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) getpid() (async) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) (async) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x3) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r6, r7, 0x0, 0x8000002b) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async) 02:06:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x20000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 399.621942][T10085] block nbd5: shutting down sockets [ 399.666929][T10098] block nbd3: shutting down sockets [ 399.738964][T10104] block nbd5: NBD_DISCONNECT [ 399.743763][T10104] block nbd5: Disconnected due to user request. [ 399.760802][T10104] block nbd5: shutting down sockets [ 399.772041][T10100] block nbd1: shutting down sockets [ 399.806436][ T3715] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 399.813198][T10112] block nbd2: shutting down sockets [ 400.246610][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.257319][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 400.266184][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 400.276710][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 400.285734][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.327590][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 400.333555][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 400.343419][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 400.646495][ T3715] usb 1-1: USB disconnect, device number 42 02:06:09 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x200000000000000) 02:06:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) 02:06:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1264) 02:06:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) (async) sendfile(r1, r2, 0x0, 0x8000002b) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) (async) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x42) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pidfd_getfd(0xffffffffffffffff, r4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000001440)=""/35, 0x23}], 0x7}, 0x10000) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x3f000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1265) 02:06:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) 02:06:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1267) 02:06:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x48000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 401.108649][T10123] block nbd5: NBD_DISCONNECT [ 401.110531][T10117] block nbd3: shutting down sockets [ 401.133446][T10123] block nbd5: Disconnected due to user request. [ 401.146145][T10123] block nbd5: shutting down sockets 02:06:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0101282) [ 401.206950][T10139] block nbd3: shutting down sockets [ 401.258880][T10145] block nbd5: NBD_DISCONNECT [ 401.263762][T10145] block nbd5: Disconnected due to user request. [ 401.271341][T10146] block nbd3: shutting down sockets [ 401.276774][T10145] block nbd5: shutting down sockets [ 401.376469][ T27] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 401.796453][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.807018][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.815961][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 401.831153][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 401.840290][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.882153][ T3636] block nbd2: Receive control failed (result -32) [ 401.889051][T10140] block nbd2: shutting down sockets [ 401.897752][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 401.910340][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 401.917112][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 401.970449][ T3651] block nbd1: Receive control failed (result -32) [ 401.978309][T10137] block nbd1: shutting down sockets [ 402.229076][ T27] usb 1-1: USB disconnect, device number 43 02:06:11 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x400000000000000) 02:06:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1268) 02:06:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0189436) 02:06:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000001440)=""/35, 0x23}], 0x7}, 0x10000) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x4c000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1269) 02:06:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1274) 02:06:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc020660b) 02:06:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1276) 02:06:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1277) [ 402.686796][T10149] block nbd3: shutting down sockets [ 402.695410][T10153] block nbd5: NBD_DISCONNECT [ 402.701733][T10153] block nbd5: Disconnected due to user request. [ 402.709179][T10153] block nbd5: shutting down sockets [ 402.776855][T10167] block nbd3: shutting down sockets [ 402.854430][T10174] block nbd5: NBD_DISCONNECT [ 402.859218][T10174] block nbd5: Disconnected due to user request. [ 402.865496][T10174] block nbd5: shutting down sockets [ 402.936413][ T6] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 403.296410][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.306717][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 403.315979][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 403.326478][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 403.336056][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.387063][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 403.392983][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 403.399478][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 403.458859][ T3651] block nbd2: Receive control failed (result -32) [ 403.459471][T10158] block nbd2: shutting down sockets [ 403.476436][ T3636] block nbd1: Receive control failed (result -32) [ 403.476549][T10160] block nbd1: shutting down sockets [ 403.718460][ T27] usb 1-1: USB disconnect, device number 44 02:06:12 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x700000000000000) 02:06:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1278) 02:06:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0481273) 02:06:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000001440)=""/35, 0x23}], 0x7}, 0x10000) (async, rerun: 64) ioctl$NBD_DO_IT(r0, 0xab03) (rerun: 64) 02:06:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$NBD_DO_IT(r0, 0xab03) (rerun: 32) 02:06:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1279) 02:06:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x127a) 02:06:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup2(r4, r3) [ 404.158121][T10180] block nbd5: NBD_DISCONNECT [ 404.162796][T10180] block nbd5: Disconnected due to user request. [ 404.169824][T10176] block nbd3: shutting down sockets 02:06:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x127b) [ 404.206443][T10180] block nbd5: shutting down sockets 02:06:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x6c000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x127c) [ 404.350329][T10201] block nbd5: NBD_DISCONNECT [ 404.355568][ T3651] block nbd3: Receive control failed (result -32) [ 404.363055][T10196] block nbd3: shutting down sockets [ 404.366460][T10201] block nbd5: Disconnected due to user request. [ 404.374665][T10201] block nbd5: shutting down sockets [ 404.416458][ T14] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 404.776540][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.787045][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 404.795925][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 404.806486][ T14] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 404.815510][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.867404][ T14] hub 1-1:1.0: bad descriptor, ignoring hub [ 404.873481][ T14] hub: probe of 1-1:1.0 failed with error -5 [ 404.879918][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 404.946937][ T3636] block nbd2: Receive control failed (result -32) [ 404.954346][T10188] block nbd2: shutting down sockets [ 405.186578][ T14] usb 1-1: USB disconnect, device number 45 02:06:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x127d) 02:06:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000140)=""/242, &(0x7f0000000000)=0xf2) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002b) ioctl$NBD_DO_IT(r6, 0xab03) 02:06:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup2(r4, r3) socket$inet_sctp(0x2, 0x5, 0x84) (async) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20201) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) dup2(r4, r3) (async) 02:06:14 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000000) 02:06:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x74000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:14 executing program 2: r0 = memfd_secret(0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x3f, 0xc1, 0x0, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040011) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x408000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) 02:06:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x127e) [ 405.615463][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.648706][T10212] block nbd5: NBD_DISCONNECT [ 405.653674][T10212] block nbd5: Disconnected due to user request. 02:06:14 executing program 2: r0 = memfd_secret(0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x3f, 0xc1, 0x0, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040011) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x408000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async) ioctl$NBD_DO_IT(r4, 0xab03) [ 405.674526][T10212] block nbd5: shutting down sockets 02:06:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x127f) 02:06:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x7a000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 405.717712][ T3636] block nbd3: Receive control failed (result -32) [ 405.721471][T10215] block nbd3: shutting down sockets 02:06:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x541b) 02:06:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20201) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) dup2(r4, r3) (rerun: 32) [ 405.783634][T10231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:06:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x5421) [ 405.849263][T10236] block nbd5: NBD_DISCONNECT [ 405.889040][T10236] block nbd5: Disconnected due to user request. [ 405.896477][ T14] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 405.949382][T10236] block nbd5: shutting down sockets [ 406.027917][T10247] block nbd3: shutting down sockets [ 406.256446][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.266728][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 406.275983][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 406.286599][ T14] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 406.295756][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:06:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000140)=""/242, &(0x7f0000000000)=0xf2) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r5, r6, 0x0, 0x8000002b) ioctl$NBD_DO_IT(r6, 0xab03) 02:06:14 executing program 2: r0 = memfd_secret(0x80000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x3f, 0xc1, 0x0, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040011) (async, rerun: 32) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x408000) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async, rerun: 64) ioctl$NBD_DO_IT(r4, 0xab03) [ 406.347317][ T14] hub 1-1:1.0: bad descriptor, ignoring hub [ 406.353382][ T14] hub: probe of 1-1:1.0 failed with error -5 [ 406.362217][T10207] block nbd1: shutting down sockets [ 406.365037][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 406.404666][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.557820][T10258] block nbd1: shutting down sockets [ 406.677285][ T3715] usb 1-1: USB disconnect, device number 46 02:06:15 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1800000000000000) 02:06:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x5450) 02:06:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x803e0000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x573806, 0x0) close(r2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) recvmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/213, 0xd5}], 0x4, &(0x7f0000000400)=""/159, 0x9f}, 0x40012020) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000500), 0x2bc043, 0x50) ioctl$NBD_DISCONNECT(r5, 0xab08) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xa9, 0x1, 0x6, "1ee5cc34440c5f698d0ba7ebf1ab9926", "4f8f339ed5642f6f8f2ba682dec986c00fd69f54107c922fbc99f0355cc9db2ccb66a1a897bc9c3b28f4da04eec77b05e3084dc5d00f25dcecddd30bafe658b87b05ec21112d0976e1fb1e930d0b5a4fabf32eccacfe0e0a3fd951d059e7fd8e502452b31b75dd323f1c1ff6ee392bbc2920ba05a6aefe240f421bdb7ed1585ff2d97aca9d28d3d09e0cb36ab69f835aa2e88556"}, 0xa9, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000680)={0xa, 0x0, [{0xffffff9a, 0x7, 0xedfa, [0xb7, 0x2, 0x4, 0x3, 0x7, 0x678b89d, 0x6, 0x1]}, {0x1, 0x4, 0x4, [0xfffffffc, 0x4, 0x9, 0x5, 0x1, 0x5, 0x7, 0x5]}, {0x8, 0x23e5, 0x4, [0xa0, 0x3ff, 0x8, 0x149, 0x1, 0x0, 0x3, 0xfb]}, {0xda60, 0x800, 0x2, [0x3, 0x80000000, 0xff, 0xe97, 0x8, 0x200, 0x3, 0x10000]}, {0x0, 0x8, 0x2, [0xf42, 0x5, 0x9, 0x0, 0x2ff1, 0x6, 0x5, 0x4]}, {0xc086, 0x2d8, 0x7b77, [0x7fff, 0xea8, 0x9, 0x8, 0x2, 0x2, 0x8f7, 0x4]}, {0x1ff, 0xcb73, 0xff, [0x9, 0xfff, 0x15, 0x80000000, 0x2f, 0x7, 0x0, 0x6]}, {0x7f, 0x79, 0x4, [0x1, 0x1, 0x5, 0xf5, 0x4, 0x401, 0x6, 0x9]}, {0x7, 0x5, 0x10001, [0x3, 0x5, 0x3f, 0x0, 0x6, 0x2, 0x9, 0x39e]}, {0x5, 0x81, 0x7, [0xffffffff, 0x80000000, 0xffff, 0x6, 0x20, 0x2, 0x40, 0x12]}]}) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 02:06:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) dup2(r2, r0) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000140)=""/242, &(0x7f0000000000)=0xf2) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r5, r6, 0x0, 0x8000002b) (async) ioctl$NBD_DO_IT(r6, 0xab03) 02:06:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x5451) [ 407.149928][T10270] block nbd5: NBD_DISCONNECT [ 407.154807][T10270] block nbd5: Disconnected due to user request. [ 407.178709][T10275] block nbd3: shutting down sockets 02:06:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x5452) 02:06:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 407.198003][T10270] block nbd5: shutting down sockets 02:06:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x5460) [ 407.285964][T10279] block nbd1: shutting down sockets 02:06:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x8933) 02:06:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x210, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000006}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x5, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0x22004841) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000001000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x6, 0xe5, &(0x7f0000000140)="310ef7f46bf48f6752e172a82460a04b5e9dd29870cef6f47077f65834a18088a8771d8bc172e04434105cb0498b433bf25e9ecced4359efd23705f662573dec5ca47237f2dc8eeaf691913e46e7edf3a722e0a2dbf4762bfd63ce7e91e04806a93cf18024224716d298c5970ca3a42aefcb6ade820b8f33bff503d448d8b810edca55f0fa1f7c2ca289ee52fc4557b49c391b7bf15698c063b606193a7f424f54e83dba65e9275c78ae014b677eb7fcd65278c16833aaa7edf4a2bc4af5c7df549cdfc26f8db5031ca058c86776d3dadd8552d5be40b63d83196b37826a713c44a667628e", 0x0, 0x5, 0x3ed, 0x0, 0x2, 0x3, 0xffffffff, 'syz1\x00'}) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r9) ioctl$NBD_DO_IT(r6, 0xab03) [ 407.348223][T10283] block nbd5: NBD_DISCONNECT [ 407.353106][T10283] block nbd5: Disconnected due to user request. [ 407.366358][T10283] block nbd5: shutting down sockets [ 407.376323][ T3683] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 407.464978][T10291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.736585][ T3683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.760591][ T3683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.793678][ T3683] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 407.830979][ T3683] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 407.849542][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.908294][ T3683] hub 1-1:1.0: bad descriptor, ignoring hub [ 407.914315][ T3683] hub: probe of 1-1:1.0 failed with error -5 [ 407.920758][ T3683] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 408.231976][ T3683] usb 1-1: USB disconnect, device number 47 [ 408.246184][ T3636] block nbd1: Receive control failed (result -32) [ 408.246438][T10287] block nbd1: shutting down sockets 02:06:17 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1f00000000000000) 02:06:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xbd150000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab00) 02:06:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) dup2(r2, r0) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) socket(0x10, 0x803, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) dup2(r2, r0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 02:06:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x13) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x210, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000006}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x5, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0x22004841) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000001000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x6, 0xe5, &(0x7f0000000140)="310ef7f46bf48f6752e172a82460a04b5e9dd29870cef6f47077f65834a18088a8771d8bc172e04434105cb0498b433bf25e9ecced4359efd23705f662573dec5ca47237f2dc8eeaf691913e46e7edf3a722e0a2dbf4762bfd63ce7e91e04806a93cf18024224716d298c5970ca3a42aefcb6ade820b8f33bff503d448d8b810edca55f0fa1f7c2ca289ee52fc4557b49c391b7bf15698c063b606193a7f424f54e83dba65e9275c78ae014b677eb7fcd65278c16833aaa7edf4a2bc4af5c7df549cdfc26f8db5031ca058c86776d3dadd8552d5be40b63d83196b37826a713c44a667628e", 0x0, 0x5, 0x3ed, 0x0, 0x2, 0x3, 0xffffffff, 'syz1\x00'}) (async) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r9) ioctl$NBD_DO_IT(r6, 0xab03) 02:06:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x573806, 0x0) close(r2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) recvmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/213, 0xd5}], 0x4, &(0x7f0000000400)=""/159, 0x9f}, 0x40012020) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000500), 0x2bc043, 0x50) ioctl$NBD_DISCONNECT(r5, 0xab08) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xa9, 0x1, 0x6, "1ee5cc34440c5f698d0ba7ebf1ab9926", "4f8f339ed5642f6f8f2ba682dec986c00fd69f54107c922fbc99f0355cc9db2ccb66a1a897bc9c3b28f4da04eec77b05e3084dc5d00f25dcecddd30bafe658b87b05ec21112d0976e1fb1e930d0b5a4fabf32eccacfe0e0a3fd951d059e7fd8e502452b31b75dd323f1c1ff6ee392bbc2920ba05a6aefe240f421bdb7ed1585ff2d97aca9d28d3d09e0cb36ab69f835aa2e88556"}, 0xa9, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000680)={0xa, 0x0, [{0xffffff9a, 0x7, 0xedfa, [0xb7, 0x2, 0x4, 0x3, 0x7, 0x678b89d, 0x6, 0x1]}, {0x1, 0x4, 0x4, [0xfffffffc, 0x4, 0x9, 0x5, 0x1, 0x5, 0x7, 0x5]}, {0x8, 0x23e5, 0x4, [0xa0, 0x3ff, 0x8, 0x149, 0x1, 0x0, 0x3, 0xfb]}, {0xda60, 0x800, 0x2, [0x3, 0x80000000, 0xff, 0xe97, 0x8, 0x200, 0x3, 0x10000]}, {0x0, 0x8, 0x2, [0xf42, 0x5, 0x9, 0x0, 0x2ff1, 0x6, 0x5, 0x4]}, {0xc086, 0x2d8, 0x7b77, [0x7fff, 0xea8, 0x9, 0x8, 0x2, 0x2, 0x8f7, 0x4]}, {0x1ff, 0xcb73, 0xff, [0x9, 0xfff, 0x15, 0x80000000, 0x2f, 0x7, 0x0, 0x6]}, {0x7f, 0x79, 0x4, [0x1, 0x1, 0x5, 0xf5, 0x4, 0x401, 0x6, 0x9]}, {0x7, 0x5, 0x10001, [0x3, 0x5, 0x3f, 0x0, 0x6, 0x2, 0x9, 0x39e]}, {0x5, 0x81, 0x7, [0xffffffff, 0x80000000, 0xffff, 0x6, 0x20, 0x2, 0x40, 0x12]}]}) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_QUE(r2, 0xab05) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) open(&(0x7f0000000000)='./file0\x00', 0x573806, 0x0) (async) close(r2) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) recvmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/213, 0xd5}], 0x4, &(0x7f0000000400)=""/159, 0x9f}, 0x40012020) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000500), 0x2bc043, 0x50) (async) ioctl$NBD_DISCONNECT(r5, 0xab08) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xa9, 0x1, 0x6, "1ee5cc34440c5f698d0ba7ebf1ab9926", "4f8f339ed5642f6f8f2ba682dec986c00fd69f54107c922fbc99f0355cc9db2ccb66a1a897bc9c3b28f4da04eec77b05e3084dc5d00f25dcecddd30bafe658b87b05ec21112d0976e1fb1e930d0b5a4fabf32eccacfe0e0a3fd951d059e7fd8e502452b31b75dd323f1c1ff6ee392bbc2920ba05a6aefe240f421bdb7ed1585ff2d97aca9d28d3d09e0cb36ab69f835aa2e88556"}, 0xa9, 0x0) (async) dup(r6) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000680)={0xa, 0x0, [{0xffffff9a, 0x7, 0xedfa, [0xb7, 0x2, 0x4, 0x3, 0x7, 0x678b89d, 0x6, 0x1]}, {0x1, 0x4, 0x4, [0xfffffffc, 0x4, 0x9, 0x5, 0x1, 0x5, 0x7, 0x5]}, {0x8, 0x23e5, 0x4, [0xa0, 0x3ff, 0x8, 0x149, 0x1, 0x0, 0x3, 0xfb]}, {0xda60, 0x800, 0x2, [0x3, 0x80000000, 0xff, 0xe97, 0x8, 0x200, 0x3, 0x10000]}, {0x0, 0x8, 0x2, [0xf42, 0x5, 0x9, 0x0, 0x2ff1, 0x6, 0x5, 0x4]}, {0xc086, 0x2d8, 0x7b77, [0x7fff, 0xea8, 0x9, 0x8, 0x2, 0x2, 0x8f7, 0x4]}, {0x1ff, 0xcb73, 0xff, [0x9, 0xfff, 0x15, 0x80000000, 0x2f, 0x7, 0x0, 0x6]}, {0x7f, 0x79, 0x4, [0x1, 0x1, 0x5, 0xf5, 0x4, 0x401, 0x6, 0x9]}, {0x7, 0x5, 0x10001, [0x3, 0x5, 0x3f, 0x0, 0x6, 0x2, 0x9, 0x39e]}, {0x5, 0x81, 0x7, [0xffffffff, 0x80000000, 0xffff, 0x6, 0x20, 0x2, 0x40, 0x12]}]}) (async) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_CLEAR_QUE(r2, 0xab05) (async) 02:06:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab01) [ 408.653671][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.678833][T10300] block nbd5: NBD_DISCONNECT [ 408.683497][T10300] block nbd5: Disconnected due to user request. 02:06:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x573806, 0x0) close(r2) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) recvmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/213, 0xd5}], 0x4, &(0x7f0000000400)=""/159, 0x9f}, 0x40012020) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (rerun: 32) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) (async) r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000500), 0x2bc043, 0x50) ioctl$NBD_DISCONNECT(r5, 0xab08) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xa9, 0x1, 0x6, "1ee5cc34440c5f698d0ba7ebf1ab9926", "4f8f339ed5642f6f8f2ba682dec986c00fd69f54107c922fbc99f0355cc9db2ccb66a1a897bc9c3b28f4da04eec77b05e3084dc5d00f25dcecddd30bafe658b87b05ec21112d0976e1fb1e930d0b5a4fabf32eccacfe0e0a3fd951d059e7fd8e502452b31b75dd323f1c1ff6ee392bbc2920ba05a6aefe240f421bdb7ed1585ff2d97aca9d28d3d09e0cb36ab69f835aa2e88556"}, 0xa9, 0x0) (async) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000680)={0xa, 0x0, [{0xffffff9a, 0x7, 0xedfa, [0xb7, 0x2, 0x4, 0x3, 0x7, 0x678b89d, 0x6, 0x1]}, {0x1, 0x4, 0x4, [0xfffffffc, 0x4, 0x9, 0x5, 0x1, 0x5, 0x7, 0x5]}, {0x8, 0x23e5, 0x4, [0xa0, 0x3ff, 0x8, 0x149, 0x1, 0x0, 0x3, 0xfb]}, {0xda60, 0x800, 0x2, [0x3, 0x80000000, 0xff, 0xe97, 0x8, 0x200, 0x3, 0x10000]}, {0x0, 0x8, 0x2, [0xf42, 0x5, 0x9, 0x0, 0x2ff1, 0x6, 0x5, 0x4]}, {0xc086, 0x2d8, 0x7b77, [0x7fff, 0xea8, 0x9, 0x8, 0x2, 0x2, 0x8f7, 0x4]}, {0x1ff, 0xcb73, 0xff, [0x9, 0xfff, 0x15, 0x80000000, 0x2f, 0x7, 0x0, 0x6]}, {0x7f, 0x79, 0x4, [0x1, 0x1, 0x5, 0xf5, 0x4, 0x401, 0x6, 0x9]}, {0x7, 0x5, 0x10001, [0x3, 0x5, 0x3f, 0x0, 0x6, 0x2, 0x9, 0x39e]}, {0x5, 0x81, 0x7, [0xffffffff, 0x80000000, 0xffff, 0x6, 0x20, 0x2, 0x40, 0x12]}]}) (async, rerun: 64) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) (rerun: 64) ioctl$NBD_DO_IT(r0, 0xab03) (async, rerun: 64) ioctl$NBD_CLEAR_QUE(r2, 0xab05) (rerun: 64) [ 408.736582][T10300] block nbd5: shutting down sockets [ 408.744480][T10323] block nbd3: shutting down sockets 02:06:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xcccf24fc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:17 executing program 2: sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)={0x1094, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x0, 0x8001, 0x80, 0xb, 0x4, 0xe853]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3f, 0x1, 0x8, 0x7, 0x0, 0x3f, 0xfffa, 0x476d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x40, 0x5, 0x7f, 0x7, 0x20, 0xffff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed8, 0x81, 0x5, 0x7, 0x6a, 0x40, 0x1000, 0x7]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1bbe, 0xb2e, 0x3, 0xae6, 0x8000, 0xb, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x401, 0x7033, 0x7f, 0x5, 0xc127, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x101, 0x800, 0x8, 0x100, 0x8, 0x44, 0x7ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x439a3d0fbce9baa1, 0x0, 0x2, 0x9, 0x6, 0x2, 0x68, 0xc, 0x2, 0x6c, 0x0, 0x5, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1ab, 0x7, 0x1, 0x7, 0xfff, 0x1, 0xd53, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x50, 0xffff, 0x3, 0x6, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdc4e, 0xff34, 0x1f, 0xfffb, 0x9, 0x2, 0xf8c]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x1, 0x3, 0x4, 0xb, 0x18, 0x16, 0xb, 0x28, 0x48]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x5a, 0x7f, 0x7b, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7ff, 0x0, 0x1ff, 0x6, 0x5, 0x40, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x54, 0x7, 0x0, 0xff, 0x9, 0x600, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0x8, 0x31, 0x13f, 0x6, 0x2, 0x4, 0x1c]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {}, {}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x24, 0x7, 0x3f, 0x7, 0x385, 0xfff9, 0x9, 0x800]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x64, 0x6, 0x6c, 0x16, 0x2, 0x9, 0x12, 0x30, 0x6, 0x12, 0x2, 0x18, 0x24, 0x5, 0x16, 0x36, 0x30, 0x36, 0x9, 0x3, 0x2, 0xee, 0x16, 0x4, 0x2, 0xe78e67752dcdcb76, 0x6c, 0x1, 0x4, 0x2c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x1b, 0x2, 0x5, 0x3, 0x3, 0x2, 0x12, 0x16, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x1, 0x8}, {0x4, 0x9}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7fff, 0x8000, 0x1, 0x7fff, 0x10, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0xc}, {0x1, 0x7}, {0x0, 0x5}, {0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x1}, {0x1, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1000, 0xfff, 0x1, 0x6, 0x5, 0x0, 0x7c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x4, 0x2, 0x5, 0x1, 0x3, 0x1, 0x1, 0x16, 0x1b, 0x3, 0x18, 0x60, 0x6c, 0xc, 0x12, 0xc, 0x1b, 0x12, 0x16, 0x4, 0x1, 0x18, 0x5, 0x8, 0x60, 0x0, 0xb, 0x1, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x3c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3f, 0x9, 0x0, 0x800, 0xb000, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x0, 0x48, 0x1, 0x60, 0x12, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x4}, {0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x4}, {}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x0, 0x4, 0x5, 0xe49, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x16, 0xb, 0x1, 0x5, 0x9, 0x60, 0x0, 0xc, 0x5, 0x6c, 0x18, 0x16, 0x6c, 0x9, 0x16, 0x60, 0x30, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x3, 0x30, 0x1, 0x24, 0x6c, 0x1b, 0x18, 0xc, 0x2, 0x3, 0x2, 0x18, 0x18, 0x6, 0x6c, 0x4, 0x1, 0x1b, 0xc, 0x4, 0x1b, 0x16, 0x60, 0x0, 0x30, 0x9, 0x9, 0x4, 0x6, 0x24]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x73, 0x9f1, 0x0, 0x7, 0x81, 0x0, 0x6951, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa6c, 0x8, 0x7, 0x6, 0x34, 0x200, 0x61, 0x81]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0x8}, {0x3, 0x8}, {0x1}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x2}, {0x0, 0xa}, {0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf821, 0x8000, 0x200, 0x1ff, 0x0, 0x9, 0x3ff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0xa}, {0x6, 0x2}, {0x5}, {0x0, 0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0xe}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa8d7, 0x7ff, 0x9, 0x9, 0x5, 0x5, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x9, 0xc, 0xb, 0x60, 0xb, 0x36, 0x60, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3f, 0xe2c5, 0x96a, 0xff58, 0xffff, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x8000, 0x8, 0x971d, 0x401, 0xaa7, 0xff80, 0xfff]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x12, 0x18, 0xb, 0x1, 0x1b, 0x4, 0x5, 0x4, 0x5, 0x3, 0x48, 0x2, 0x5, 0x4, 0x3, 0x4, 0x2, 0x2, 0x3, 0x18, 0x1b, 0x48, 0x12, 0x16, 0x5, 0x48, 0xc, 0x12, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa7fd, 0x20, 0xe3d5, 0x2, 0x30, 0x5, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x631, 0x9, 0x7, 0x4, 0x3f, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x40, 0xb530, 0xfff, 0x4, 0xff71, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xffff, 0x1, 0x8, 0x3, 0x9639, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x8, 0x1, 0x81, 0x1, 0x100, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x6c, 0x1, 0x3, 0x18, 0x18, 0x39, 0x30, 0x24, 0x4, 0x9, 0x16, 0xc, 0x36, 0x6, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2d5, 0x3, 0x3, 0x252, 0x9, 0x100, 0x7ff, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3b3, 0x1817, 0x53b, 0x5, 0x2, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xffff, 0x8, 0x3, 0xe3a, 0x7, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x3ff, 0xffff, 0x0, 0x9, 0x1, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x19, 0x24, 0x9, 0xc, 0x16, 0x24, 0x24, 0x4, 0x3, 0x18, 0xd, 0x24, 0x4, 0x4, 0x48, 0x6d, 0x18, 0x18, 0x1b, 0x1b, 0x18, 0x6, 0x5, 0xc, 0x1, 0x30, 0x5, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {}, {0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x1}, {0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x2, 0x2, 0x2, 0x6c, 0x12, 0x24, 0x67, 0x0, 0x36, 0x6, 0x2]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x4, 0x1, 0x4, 0xb, 0x16, 0x9, 0x5b, 0x1b, 0x4, 0x6, 0x5, 0x16, 0x18, 0x5, 0x6f, 0x2, 0x0, 0x30, 0x1, 0x1, 0x3, 0x48, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xe5f, 0x4, 0x400, 0x7, 0x4d24, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x30, 0x60, 0xc, 0x1b, 0x1, 0x3, 0x36, 0x6c, 0x7f, 0x2, 0x24, 0x24, 0x6c, 0x1b, 0x24, 0xb, 0x6c, 0x3, 0x3, 0x9, 0x6, 0x12, 0x3, 0x16, 0x5, 0x18, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x3, 0xc1d, 0x8, 0x81, 0x8]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb10f, 0x40, 0x0, 0x2, 0x6, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7fff, 0x1f, 0xfffc, 0x1, 0x9, 0xff, 0x2cb5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x1, 0x12, 0x48, 0x3, 0x0, 0x18, 0x45, 0x60, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x100, 0x3, 0xfff9, 0x651b, 0x7, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x1, 0x400, 0x8, 0x7, 0x8001, 0xc1]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0xa}, {0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3f, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x91]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9, 0xff, 0x479, 0x9, 0x3f, 0x53]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x36, 0x3, 0xc, 0x24, 0x1, 0x18, 0x12, 0x6, 0x12, 0x0, 0x5, 0xc, 0x48, 0x12, 0x3, 0x30, 0x1, 0xa, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x60, 0x6f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xffff, 0x0, 0x1, 0x9c7, 0x8000, 0x5, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x8, 0x81, 0x0, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x5, 0x2}, {}, {0x6, 0x8}, {0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x6, 0xc}, {0x3, 0x5}, {0x3, 0x2}, {0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4}, {0x5, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x14, 0xd, 0x3, 0x7ff, 0xf000, 0x9, 0x5]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6, 0x1, 0x3, 0x7, 0xff, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x101, 0x7257, 0x9, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0x400, 0x1, 0x9, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x1}, {0x4, 0x8}, {0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {}, {0x5, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x12}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x12, 0x24, 0x7d136dea69cc58a9, 0x60, 0x48, 0xc, 0x1, 0x2, 0x9, 0x16, 0x5, 0x71, 0x9, 0x6, 0x1b, 0xc, 0x60, 0x0, 0x36, 0x6c, 0x1, 0x16, 0x1, 0x0, 0x36, 0x5, 0x14, 0x16, 0x6c, 0x4, 0x6c]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x36, 0x6c, 0x29, 0x1, 0x60, 0x16, 0xb, 0x16, 0xc, 0xb, 0xc, 0x48, 0x3, 0x4, 0x1e, 0x6, 0x9, 0x9, 0x6, 0x2, 0x36, 0xb, 0x60, 0x48, 0x4, 0x48, 0x60, 0x6c, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xefa, 0x80, 0x7, 0x6, 0x800, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfff, 0x1ff, 0x5f, 0xfff, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x7}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x6, 0x15}, {0x0, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x32ab, 0xca4, 0xc03, 0xfff9, 0x6, 0x1f]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x15, 0x18, 0x9, 0x6, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x338, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x105, 0x2b, 0x5, 0x0, 0x5, 0xffff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x4}, {0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x1a}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x16, 0x2, 0x12, 0x30, 0x3, 0x6c, 0x5, 0xc, 0x12, 0x12, 0x4a, 0x60, 0x4]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x2, 0x6c, 0x48, 0x30, 0x0, 0x1b, 0x16, 0x6c, 0x1, 0xb, 0x1, 0x2, 0x9, 0x6c, 0x49, 0x24, 0x5, 0x30, 0x6c, 0x9, 0x3, 0xb, 0x1, 0x1b, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x6, 0x18, 0x6c, 0xc, 0x24, 0x60, 0x1, 0x6c, 0x6, 0x12, 0xc, 0x36, 0x48, 0x30, 0x5, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x7, 0x7fff, 0x4, 0x1ff, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb0, 0x9e, 0x2, 0x8001, 0x7, 0x9, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x18, 0x30, 0x16, 0x0, 0xc, 0x24, 0x60, 0xc, 0x6c, 0x48, 0x1b, 0x1b, 0x3, 0x6c, 0x36, 0x2b, 0xc, 0x41, 0x4, 0x24, 0x5, 0x9, 0x3, 0xc, 0x1b, 0x0, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x4}, {}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x3, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7fff, 0x8000, 0xfe00, 0x101, 0x2d77, 0x3, 0xb6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x14}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {}, {}, {}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0xa}, {0x1}, {0x2, 0x2}, {0x5, 0x2}, {}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x1}, {0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x44c2, 0x7c40, 0x81, 0x40, 0x1, 0x5, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x2, 0x0, 0x2, 0x8001, 0xe3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x5684, 0x9, 0x20, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x7}, {0x7, 0x1}, {0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x4, 0xa}, {}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x24, 0x30, 0xc, 0x6c, 0x6, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x80, 0x7, 0x9, 0x1, 0x1ff, 0x1f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x81, 0x1, 0xfff8, 0x352, 0xbb08, 0xff81, 0xf1]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x5}, {0x0, 0xa}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x71, 0xc, 0x3, 0x36, 0x9, 0x30, 0x24, 0x2, 0x1, 0x5, 0x21, 0x1, 0x24, 0x36, 0x16, 0x4, 0x6, 0x48, 0x0, 0x9, 0x2, 0xb, 0x5, 0x1b, 0x36, 0x3, 0x4, 0xc, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1094}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 02:06:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab04) [ 408.910255][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 408.938502][T10346] block nbd5: NBD_DISCONNECT [ 408.945271][T10346] block nbd5: Disconnected due to user request. [ 408.953022][T10346] block nbd5: shutting down sockets [ 408.986441][ T3715] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 409.378152][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.388341][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.401179][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 409.411861][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 409.421190][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.477428][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 409.483391][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 409.489864][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 409.796947][ T3715] usb 1-1: USB disconnect, device number 48 02:06:18 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3f00000000000000) 02:06:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) dup2(r2, r0) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) socket(0x10, 0x803, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) dup2(r2, r0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 02:06:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab05) 02:06:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x210, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000006}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x5, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0x22004841) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000001000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x6, 0xe5, &(0x7f0000000140)="310ef7f46bf48f6752e172a82460a04b5e9dd29870cef6f47077f65834a18088a8771d8bc172e04434105cb0498b433bf25e9ecced4359efd23705f662573dec5ca47237f2dc8eeaf691913e46e7edf3a722e0a2dbf4762bfd63ce7e91e04806a93cf18024224716d298c5970ca3a42aefcb6ade820b8f33bff503d448d8b810edca55f0fa1f7c2ca289ee52fc4557b49c391b7bf15698c063b606193a7f424f54e83dba65e9275c78ae014b677eb7fcd65278c16833aaa7edf4a2bc4af5c7df549cdfc26f8db5031ca058c86776d3dadd8552d5be40b63d83196b37826a713c44a667628e", 0x0, 0x5, 0x3ed, 0x0, 0x2, 0x3, 0xffffffff, 'syz1\x00'}) (async) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r9) (async) ioctl$NBD_DO_IT(r6, 0xab03) 02:06:18 executing program 2: sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)={0x1094, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x0, 0x8001, 0x80, 0xb, 0x4, 0xe853]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3f, 0x1, 0x8, 0x7, 0x0, 0x3f, 0xfffa, 0x476d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x40, 0x5, 0x7f, 0x7, 0x20, 0xffff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed8, 0x81, 0x5, 0x7, 0x6a, 0x40, 0x1000, 0x7]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1bbe, 0xb2e, 0x3, 0xae6, 0x8000, 0xb, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x401, 0x7033, 0x7f, 0x5, 0xc127, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x101, 0x800, 0x8, 0x100, 0x8, 0x44, 0x7ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x439a3d0fbce9baa1, 0x0, 0x2, 0x9, 0x6, 0x2, 0x68, 0xc, 0x2, 0x6c, 0x0, 0x5, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1ab, 0x7, 0x1, 0x7, 0xfff, 0x1, 0xd53, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x50, 0xffff, 0x3, 0x6, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdc4e, 0xff34, 0x1f, 0xfffb, 0x9, 0x2, 0xf8c]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x1, 0x3, 0x4, 0xb, 0x18, 0x16, 0xb, 0x28, 0x48]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x5a, 0x7f, 0x7b, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7ff, 0x0, 0x1ff, 0x6, 0x5, 0x40, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x54, 0x7, 0x0, 0xff, 0x9, 0x600, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0x8, 0x31, 0x13f, 0x6, 0x2, 0x4, 0x1c]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {}, {}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x24, 0x7, 0x3f, 0x7, 0x385, 0xfff9, 0x9, 0x800]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x64, 0x6, 0x6c, 0x16, 0x2, 0x9, 0x12, 0x30, 0x6, 0x12, 0x2, 0x18, 0x24, 0x5, 0x16, 0x36, 0x30, 0x36, 0x9, 0x3, 0x2, 0xee, 0x16, 0x4, 0x2, 0xe78e67752dcdcb76, 0x6c, 0x1, 0x4, 0x2c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x1b, 0x2, 0x5, 0x3, 0x3, 0x2, 0x12, 0x16, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x1, 0x8}, {0x4, 0x9}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7fff, 0x8000, 0x1, 0x7fff, 0x10, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0xc}, {0x1, 0x7}, {0x0, 0x5}, {0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x1}, {0x1, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1000, 0xfff, 0x1, 0x6, 0x5, 0x0, 0x7c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x4, 0x2, 0x5, 0x1, 0x3, 0x1, 0x1, 0x16, 0x1b, 0x3, 0x18, 0x60, 0x6c, 0xc, 0x12, 0xc, 0x1b, 0x12, 0x16, 0x4, 0x1, 0x18, 0x5, 0x8, 0x60, 0x0, 0xb, 0x1, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x3c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3f, 0x9, 0x0, 0x800, 0xb000, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x0, 0x48, 0x1, 0x60, 0x12, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x4}, {0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x4}, {}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x0, 0x4, 0x5, 0xe49, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x16, 0xb, 0x1, 0x5, 0x9, 0x60, 0x0, 0xc, 0x5, 0x6c, 0x18, 0x16, 0x6c, 0x9, 0x16, 0x60, 0x30, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x3, 0x30, 0x1, 0x24, 0x6c, 0x1b, 0x18, 0xc, 0x2, 0x3, 0x2, 0x18, 0x18, 0x6, 0x6c, 0x4, 0x1, 0x1b, 0xc, 0x4, 0x1b, 0x16, 0x60, 0x0, 0x30, 0x9, 0x9, 0x4, 0x6, 0x24]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x73, 0x9f1, 0x0, 0x7, 0x81, 0x0, 0x6951, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa6c, 0x8, 0x7, 0x6, 0x34, 0x200, 0x61, 0x81]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0x8}, {0x3, 0x8}, {0x1}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x2}, {0x0, 0xa}, {0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf821, 0x8000, 0x200, 0x1ff, 0x0, 0x9, 0x3ff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0xa}, {0x6, 0x2}, {0x5}, {0x0, 0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0xe}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa8d7, 0x7ff, 0x9, 0x9, 0x5, 0x5, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x9, 0xc, 0xb, 0x60, 0xb, 0x36, 0x60, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3f, 0xe2c5, 0x96a, 0xff58, 0xffff, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x8000, 0x8, 0x971d, 0x401, 0xaa7, 0xff80, 0xfff]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x12, 0x18, 0xb, 0x1, 0x1b, 0x4, 0x5, 0x4, 0x5, 0x3, 0x48, 0x2, 0x5, 0x4, 0x3, 0x4, 0x2, 0x2, 0x3, 0x18, 0x1b, 0x48, 0x12, 0x16, 0x5, 0x48, 0xc, 0x12, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa7fd, 0x20, 0xe3d5, 0x2, 0x30, 0x5, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x631, 0x9, 0x7, 0x4, 0x3f, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x40, 0xb530, 0xfff, 0x4, 0xff71, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xffff, 0x1, 0x8, 0x3, 0x9639, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x8, 0x1, 0x81, 0x1, 0x100, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x6c, 0x1, 0x3, 0x18, 0x18, 0x39, 0x30, 0x24, 0x4, 0x9, 0x16, 0xc, 0x36, 0x6, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2d5, 0x3, 0x3, 0x252, 0x9, 0x100, 0x7ff, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3b3, 0x1817, 0x53b, 0x5, 0x2, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xffff, 0x8, 0x3, 0xe3a, 0x7, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x3ff, 0xffff, 0x0, 0x9, 0x1, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x19, 0x24, 0x9, 0xc, 0x16, 0x24, 0x24, 0x4, 0x3, 0x18, 0xd, 0x24, 0x4, 0x4, 0x48, 0x6d, 0x18, 0x18, 0x1b, 0x1b, 0x18, 0x6, 0x5, 0xc, 0x1, 0x30, 0x5, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {}, {0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x1}, {0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x2, 0x2, 0x2, 0x6c, 0x12, 0x24, 0x67, 0x0, 0x36, 0x6, 0x2]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x4, 0x1, 0x4, 0xb, 0x16, 0x9, 0x5b, 0x1b, 0x4, 0x6, 0x5, 0x16, 0x18, 0x5, 0x6f, 0x2, 0x0, 0x30, 0x1, 0x1, 0x3, 0x48, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xe5f, 0x4, 0x400, 0x7, 0x4d24, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x30, 0x60, 0xc, 0x1b, 0x1, 0x3, 0x36, 0x6c, 0x7f, 0x2, 0x24, 0x24, 0x6c, 0x1b, 0x24, 0xb, 0x6c, 0x3, 0x3, 0x9, 0x6, 0x12, 0x3, 0x16, 0x5, 0x18, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x3, 0xc1d, 0x8, 0x81, 0x8]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb10f, 0x40, 0x0, 0x2, 0x6, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7fff, 0x1f, 0xfffc, 0x1, 0x9, 0xff, 0x2cb5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x1, 0x12, 0x48, 0x3, 0x0, 0x18, 0x45, 0x60, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x100, 0x3, 0xfff9, 0x651b, 0x7, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x1, 0x400, 0x8, 0x7, 0x8001, 0xc1]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0xa}, {0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3f, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x91]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9, 0xff, 0x479, 0x9, 0x3f, 0x53]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x36, 0x3, 0xc, 0x24, 0x1, 0x18, 0x12, 0x6, 0x12, 0x0, 0x5, 0xc, 0x48, 0x12, 0x3, 0x30, 0x1, 0xa, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x60, 0x6f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xffff, 0x0, 0x1, 0x9c7, 0x8000, 0x5, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x8, 0x81, 0x0, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x5, 0x2}, {}, {0x6, 0x8}, {0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x6, 0xc}, {0x3, 0x5}, {0x3, 0x2}, {0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4}, {0x5, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x14, 0xd, 0x3, 0x7ff, 0xf000, 0x9, 0x5]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6, 0x1, 0x3, 0x7, 0xff, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x101, 0x7257, 0x9, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0x400, 0x1, 0x9, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x1}, {0x4, 0x8}, {0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {}, {0x5, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x12}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x12, 0x24, 0x7d136dea69cc58a9, 0x60, 0x48, 0xc, 0x1, 0x2, 0x9, 0x16, 0x5, 0x71, 0x9, 0x6, 0x1b, 0xc, 0x60, 0x0, 0x36, 0x6c, 0x1, 0x16, 0x1, 0x0, 0x36, 0x5, 0x14, 0x16, 0x6c, 0x4, 0x6c]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x36, 0x6c, 0x29, 0x1, 0x60, 0x16, 0xb, 0x16, 0xc, 0xb, 0xc, 0x48, 0x3, 0x4, 0x1e, 0x6, 0x9, 0x9, 0x6, 0x2, 0x36, 0xb, 0x60, 0x48, 0x4, 0x48, 0x60, 0x6c, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xefa, 0x80, 0x7, 0x6, 0x800, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfff, 0x1ff, 0x5f, 0xfff, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x7}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x6, 0x15}, {0x0, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x32ab, 0xca4, 0xc03, 0xfff9, 0x6, 0x1f]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x15, 0x18, 0x9, 0x6, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x338, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x105, 0x2b, 0x5, 0x0, 0x5, 0xffff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x4}, {0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x1a}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x16, 0x2, 0x12, 0x30, 0x3, 0x6c, 0x5, 0xc, 0x12, 0x12, 0x4a, 0x60, 0x4]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x2, 0x6c, 0x48, 0x30, 0x0, 0x1b, 0x16, 0x6c, 0x1, 0xb, 0x1, 0x2, 0x9, 0x6c, 0x49, 0x24, 0x5, 0x30, 0x6c, 0x9, 0x3, 0xb, 0x1, 0x1b, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x6, 0x18, 0x6c, 0xc, 0x24, 0x60, 0x1, 0x6c, 0x6, 0x12, 0xc, 0x36, 0x48, 0x30, 0x5, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x7, 0x7fff, 0x4, 0x1ff, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb0, 0x9e, 0x2, 0x8001, 0x7, 0x9, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x18, 0x30, 0x16, 0x0, 0xc, 0x24, 0x60, 0xc, 0x6c, 0x48, 0x1b, 0x1b, 0x3, 0x6c, 0x36, 0x2b, 0xc, 0x41, 0x4, 0x24, 0x5, 0x9, 0x3, 0xc, 0x1b, 0x0, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x4}, {}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x3, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7fff, 0x8000, 0xfe00, 0x101, 0x2d77, 0x3, 0xb6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x14}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {}, {}, {}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0xa}, {0x1}, {0x2, 0x2}, {0x5, 0x2}, {}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x1}, {0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x44c2, 0x7c40, 0x81, 0x40, 0x1, 0x5, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x2, 0x0, 0x2, 0x8001, 0xe3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x5684, 0x9, 0x20, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x7}, {0x7, 0x1}, {0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x4, 0xa}, {}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x24, 0x30, 0xc, 0x6c, 0x6, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x80, 0x7, 0x9, 0x1, 0x1ff, 0x1f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x81, 0x1, 0xfff8, 0x352, 0xbb08, 0xff81, 0xf1]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x5}, {0x0, 0xa}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x71, 0xc, 0x3, 0x36, 0x9, 0x30, 0x24, 0x2, 0x1, 0x5, 0x21, 0x1, 0x24, 0x36, 0x16, 0x4, 0x6, 0x48, 0x0, 0x9, 0x2, 0xb, 0x5, 0x1b, 0x36, 0x3, 0x4, 0xc, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1094}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 02:06:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab06) 02:06:18 executing program 2: sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)={0x1094, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x0, 0x8001, 0x80, 0xb, 0x4, 0xe853]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3f, 0x1, 0x8, 0x7, 0x0, 0x3f, 0xfffa, 0x476d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x40, 0x5, 0x7f, 0x7, 0x20, 0xffff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed8, 0x81, 0x5, 0x7, 0x6a, 0x40, 0x1000, 0x7]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1bbe, 0xb2e, 0x3, 0xae6, 0x8000, 0xb, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x401, 0x7033, 0x7f, 0x5, 0xc127, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x101, 0x800, 0x8, 0x100, 0x8, 0x44, 0x7ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x439a3d0fbce9baa1, 0x0, 0x2, 0x9, 0x6, 0x2, 0x68, 0xc, 0x2, 0x6c, 0x0, 0x5, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1ab, 0x7, 0x1, 0x7, 0xfff, 0x1, 0xd53, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x50, 0xffff, 0x3, 0x6, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdc4e, 0xff34, 0x1f, 0xfffb, 0x9, 0x2, 0xf8c]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x1, 0x3, 0x4, 0xb, 0x18, 0x16, 0xb, 0x28, 0x48]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x5a, 0x7f, 0x7b, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7ff, 0x0, 0x1ff, 0x6, 0x5, 0x40, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x54, 0x7, 0x0, 0xff, 0x9, 0x600, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0x8, 0x31, 0x13f, 0x6, 0x2, 0x4, 0x1c]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {}, {}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x24, 0x7, 0x3f, 0x7, 0x385, 0xfff9, 0x9, 0x800]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x64, 0x6, 0x6c, 0x16, 0x2, 0x9, 0x12, 0x30, 0x6, 0x12, 0x2, 0x18, 0x24, 0x5, 0x16, 0x36, 0x30, 0x36, 0x9, 0x3, 0x2, 0xee, 0x16, 0x4, 0x2, 0xe78e67752dcdcb76, 0x6c, 0x1, 0x4, 0x2c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x1b, 0x2, 0x5, 0x3, 0x3, 0x2, 0x12, 0x16, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x1, 0x8}, {0x4, 0x9}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7fff, 0x8000, 0x1, 0x7fff, 0x10, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0xc}, {0x1, 0x7}, {0x0, 0x5}, {0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x1}, {0x1, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1000, 0xfff, 0x1, 0x6, 0x5, 0x0, 0x7c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x4, 0x2, 0x5, 0x1, 0x3, 0x1, 0x1, 0x16, 0x1b, 0x3, 0x18, 0x60, 0x6c, 0xc, 0x12, 0xc, 0x1b, 0x12, 0x16, 0x4, 0x1, 0x18, 0x5, 0x8, 0x60, 0x0, 0xb, 0x1, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x3c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3f, 0x9, 0x0, 0x800, 0xb000, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x0, 0x48, 0x1, 0x60, 0x12, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x4}, {0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x4}, {}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x0, 0x4, 0x5, 0xe49, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x16, 0xb, 0x1, 0x5, 0x9, 0x60, 0x0, 0xc, 0x5, 0x6c, 0x18, 0x16, 0x6c, 0x9, 0x16, 0x60, 0x30, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x3, 0x30, 0x1, 0x24, 0x6c, 0x1b, 0x18, 0xc, 0x2, 0x3, 0x2, 0x18, 0x18, 0x6, 0x6c, 0x4, 0x1, 0x1b, 0xc, 0x4, 0x1b, 0x16, 0x60, 0x0, 0x30, 0x9, 0x9, 0x4, 0x6, 0x24]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x73, 0x9f1, 0x0, 0x7, 0x81, 0x0, 0x6951, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa6c, 0x8, 0x7, 0x6, 0x34, 0x200, 0x61, 0x81]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0x8}, {0x3, 0x8}, {0x1}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x2}, {0x0, 0xa}, {0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf821, 0x8000, 0x200, 0x1ff, 0x0, 0x9, 0x3ff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0xa}, {0x6, 0x2}, {0x5}, {0x0, 0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0xe}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa8d7, 0x7ff, 0x9, 0x9, 0x5, 0x5, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x9, 0xc, 0xb, 0x60, 0xb, 0x36, 0x60, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3f, 0xe2c5, 0x96a, 0xff58, 0xffff, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x8000, 0x8, 0x971d, 0x401, 0xaa7, 0xff80, 0xfff]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x12, 0x18, 0xb, 0x1, 0x1b, 0x4, 0x5, 0x4, 0x5, 0x3, 0x48, 0x2, 0x5, 0x4, 0x3, 0x4, 0x2, 0x2, 0x3, 0x18, 0x1b, 0x48, 0x12, 0x16, 0x5, 0x48, 0xc, 0x12, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa7fd, 0x20, 0xe3d5, 0x2, 0x30, 0x5, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x631, 0x9, 0x7, 0x4, 0x3f, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x40, 0xb530, 0xfff, 0x4, 0xff71, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xffff, 0x1, 0x8, 0x3, 0x9639, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x8, 0x1, 0x81, 0x1, 0x100, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x6c, 0x1, 0x3, 0x18, 0x18, 0x39, 0x30, 0x24, 0x4, 0x9, 0x16, 0xc, 0x36, 0x6, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2d5, 0x3, 0x3, 0x252, 0x9, 0x100, 0x7ff, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3b3, 0x1817, 0x53b, 0x5, 0x2, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xffff, 0x8, 0x3, 0xe3a, 0x7, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x3ff, 0xffff, 0x0, 0x9, 0x1, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x19, 0x24, 0x9, 0xc, 0x16, 0x24, 0x24, 0x4, 0x3, 0x18, 0xd, 0x24, 0x4, 0x4, 0x48, 0x6d, 0x18, 0x18, 0x1b, 0x1b, 0x18, 0x6, 0x5, 0xc, 0x1, 0x30, 0x5, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {}, {0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x1}, {0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x2, 0x2, 0x2, 0x6c, 0x12, 0x24, 0x67, 0x0, 0x36, 0x6, 0x2]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x4, 0x1, 0x4, 0xb, 0x16, 0x9, 0x5b, 0x1b, 0x4, 0x6, 0x5, 0x16, 0x18, 0x5, 0x6f, 0x2, 0x0, 0x30, 0x1, 0x1, 0x3, 0x48, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xe5f, 0x4, 0x400, 0x7, 0x4d24, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x30, 0x60, 0xc, 0x1b, 0x1, 0x3, 0x36, 0x6c, 0x7f, 0x2, 0x24, 0x24, 0x6c, 0x1b, 0x24, 0xb, 0x6c, 0x3, 0x3, 0x9, 0x6, 0x12, 0x3, 0x16, 0x5, 0x18, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x3, 0xc1d, 0x8, 0x81, 0x8]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb10f, 0x40, 0x0, 0x2, 0x6, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7fff, 0x1f, 0xfffc, 0x1, 0x9, 0xff, 0x2cb5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x1, 0x12, 0x48, 0x3, 0x0, 0x18, 0x45, 0x60, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x100, 0x3, 0xfff9, 0x651b, 0x7, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x1, 0x400, 0x8, 0x7, 0x8001, 0xc1]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0xa}, {0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3f, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x91]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9, 0xff, 0x479, 0x9, 0x3f, 0x53]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x36, 0x3, 0xc, 0x24, 0x1, 0x18, 0x12, 0x6, 0x12, 0x0, 0x5, 0xc, 0x48, 0x12, 0x3, 0x30, 0x1, 0xa, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x60, 0x6f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xffff, 0x0, 0x1, 0x9c7, 0x8000, 0x5, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x8, 0x81, 0x0, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x5, 0x2}, {}, {0x6, 0x8}, {0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x6, 0xc}, {0x3, 0x5}, {0x3, 0x2}, {0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4}, {0x5, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x14, 0xd, 0x3, 0x7ff, 0xf000, 0x9, 0x5]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6, 0x1, 0x3, 0x7, 0xff, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x101, 0x7257, 0x9, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0x400, 0x1, 0x9, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x1}, {0x4, 0x8}, {0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {}, {0x5, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x12}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x12, 0x24, 0x7d136dea69cc58a9, 0x60, 0x48, 0xc, 0x1, 0x2, 0x9, 0x16, 0x5, 0x71, 0x9, 0x6, 0x1b, 0xc, 0x60, 0x0, 0x36, 0x6c, 0x1, 0x16, 0x1, 0x0, 0x36, 0x5, 0x14, 0x16, 0x6c, 0x4, 0x6c]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x36, 0x6c, 0x29, 0x1, 0x60, 0x16, 0xb, 0x16, 0xc, 0xb, 0xc, 0x48, 0x3, 0x4, 0x1e, 0x6, 0x9, 0x9, 0x6, 0x2, 0x36, 0xb, 0x60, 0x48, 0x4, 0x48, 0x60, 0x6c, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xefa, 0x80, 0x7, 0x6, 0x800, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfff, 0x1ff, 0x5f, 0xfff, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x7}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x6, 0x15}, {0x0, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x32ab, 0xca4, 0xc03, 0xfff9, 0x6, 0x1f]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x15, 0x18, 0x9, 0x6, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x338, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x105, 0x2b, 0x5, 0x0, 0x5, 0xffff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x4}, {0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x1a}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x16, 0x2, 0x12, 0x30, 0x3, 0x6c, 0x5, 0xc, 0x12, 0x12, 0x4a, 0x60, 0x4]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x2, 0x6c, 0x48, 0x30, 0x0, 0x1b, 0x16, 0x6c, 0x1, 0xb, 0x1, 0x2, 0x9, 0x6c, 0x49, 0x24, 0x5, 0x30, 0x6c, 0x9, 0x3, 0xb, 0x1, 0x1b, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x6, 0x18, 0x6c, 0xc, 0x24, 0x60, 0x1, 0x6c, 0x6, 0x12, 0xc, 0x36, 0x48, 0x30, 0x5, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x7, 0x7fff, 0x4, 0x1ff, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb0, 0x9e, 0x2, 0x8001, 0x7, 0x9, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x18, 0x30, 0x16, 0x0, 0xc, 0x24, 0x60, 0xc, 0x6c, 0x48, 0x1b, 0x1b, 0x3, 0x6c, 0x36, 0x2b, 0xc, 0x41, 0x4, 0x24, 0x5, 0x9, 0x3, 0xc, 0x1b, 0x0, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x4}, {}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x3, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7fff, 0x8000, 0xfe00, 0x101, 0x2d77, 0x3, 0xb6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x14}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {}, {}, {}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0xa}, {0x1}, {0x2, 0x2}, {0x5, 0x2}, {}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x1}, {0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x44c2, 0x7c40, 0x81, 0x40, 0x1, 0x5, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x2, 0x0, 0x2, 0x8001, 0xe3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x5684, 0x9, 0x20, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x7}, {0x7, 0x1}, {0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x4, 0xa}, {}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x24, 0x30, 0xc, 0x6c, 0x6, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x80, 0x7, 0x9, 0x1, 0x1ff, 0x1f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x81, 0x1, 0xfff8, 0x352, 0xbb08, 0xff81, 0xf1]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x5}, {0x0, 0xa}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x71, 0xc, 0x3, 0x36, 0x9, 0x30, 0x24, 0x2, 0x1, 0x5, 0x21, 0x1, 0x24, 0x36, 0x16, 0x4, 0x6, 0x48, 0x0, 0x9, 0x2, 0xb, 0x5, 0x1b, 0x36, 0x3, 0x4, 0xc, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1094}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)={0x1094, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x0, 0x8001, 0x80, 0xb, 0x4, 0xe853]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3f, 0x1, 0x8, 0x7, 0x0, 0x3f, 0xfffa, 0x476d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x40, 0x5, 0x7f, 0x7, 0x20, 0xffff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed8, 0x81, 0x5, 0x7, 0x6a, 0x40, 0x1000, 0x7]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1bbe, 0xb2e, 0x3, 0xae6, 0x8000, 0xb, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x401, 0x7033, 0x7f, 0x5, 0xc127, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x101, 0x800, 0x8, 0x100, 0x8, 0x44, 0x7ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x439a3d0fbce9baa1, 0x0, 0x2, 0x9, 0x6, 0x2, 0x68, 0xc, 0x2, 0x6c, 0x0, 0x5, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1ab, 0x7, 0x1, 0x7, 0xfff, 0x1, 0xd53, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x50, 0xffff, 0x3, 0x6, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdc4e, 0xff34, 0x1f, 0xfffb, 0x9, 0x2, 0xf8c]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x1, 0x3, 0x4, 0xb, 0x18, 0x16, 0xb, 0x28, 0x48]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x5a, 0x7f, 0x7b, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7ff, 0x0, 0x1ff, 0x6, 0x5, 0x40, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x54, 0x7, 0x0, 0xff, 0x9, 0x600, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0x8, 0x31, 0x13f, 0x6, 0x2, 0x4, 0x1c]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {}, {}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x24, 0x7, 0x3f, 0x7, 0x385, 0xfff9, 0x9, 0x800]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x64, 0x6, 0x6c, 0x16, 0x2, 0x9, 0x12, 0x30, 0x6, 0x12, 0x2, 0x18, 0x24, 0x5, 0x16, 0x36, 0x30, 0x36, 0x9, 0x3, 0x2, 0xee, 0x16, 0x4, 0x2, 0xe78e67752dcdcb76, 0x6c, 0x1, 0x4, 0x2c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x1b, 0x2, 0x5, 0x3, 0x3, 0x2, 0x12, 0x16, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x1, 0x8}, {0x4, 0x9}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7fff, 0x8000, 0x1, 0x7fff, 0x10, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0xc}, {0x1, 0x7}, {0x0, 0x5}, {0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x1}, {0x1, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1000, 0xfff, 0x1, 0x6, 0x5, 0x0, 0x7c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x4, 0x2, 0x5, 0x1, 0x3, 0x1, 0x1, 0x16, 0x1b, 0x3, 0x18, 0x60, 0x6c, 0xc, 0x12, 0xc, 0x1b, 0x12, 0x16, 0x4, 0x1, 0x18, 0x5, 0x8, 0x60, 0x0, 0xb, 0x1, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x3c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3f, 0x9, 0x0, 0x800, 0xb000, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x0, 0x48, 0x1, 0x60, 0x12, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x4}, {0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x4}, {}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x0, 0x4, 0x5, 0xe49, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x16, 0xb, 0x1, 0x5, 0x9, 0x60, 0x0, 0xc, 0x5, 0x6c, 0x18, 0x16, 0x6c, 0x9, 0x16, 0x60, 0x30, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x3, 0x30, 0x1, 0x24, 0x6c, 0x1b, 0x18, 0xc, 0x2, 0x3, 0x2, 0x18, 0x18, 0x6, 0x6c, 0x4, 0x1, 0x1b, 0xc, 0x4, 0x1b, 0x16, 0x60, 0x0, 0x30, 0x9, 0x9, 0x4, 0x6, 0x24]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x73, 0x9f1, 0x0, 0x7, 0x81, 0x0, 0x6951, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa6c, 0x8, 0x7, 0x6, 0x34, 0x200, 0x61, 0x81]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0x8}, {0x3, 0x8}, {0x1}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x2}, {0x0, 0xa}, {0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf821, 0x8000, 0x200, 0x1ff, 0x0, 0x9, 0x3ff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0xa}, {0x6, 0x2}, {0x5}, {0x0, 0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0xe}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa8d7, 0x7ff, 0x9, 0x9, 0x5, 0x5, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x9, 0xc, 0xb, 0x60, 0xb, 0x36, 0x60, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3f, 0xe2c5, 0x96a, 0xff58, 0xffff, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x8000, 0x8, 0x971d, 0x401, 0xaa7, 0xff80, 0xfff]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x12, 0x18, 0xb, 0x1, 0x1b, 0x4, 0x5, 0x4, 0x5, 0x3, 0x48, 0x2, 0x5, 0x4, 0x3, 0x4, 0x2, 0x2, 0x3, 0x18, 0x1b, 0x48, 0x12, 0x16, 0x5, 0x48, 0xc, 0x12, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa7fd, 0x20, 0xe3d5, 0x2, 0x30, 0x5, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x631, 0x9, 0x7, 0x4, 0x3f, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x40, 0xb530, 0xfff, 0x4, 0xff71, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xffff, 0x1, 0x8, 0x3, 0x9639, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x8, 0x1, 0x81, 0x1, 0x100, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x6c, 0x1, 0x3, 0x18, 0x18, 0x39, 0x30, 0x24, 0x4, 0x9, 0x16, 0xc, 0x36, 0x6, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2d5, 0x3, 0x3, 0x252, 0x9, 0x100, 0x7ff, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3b3, 0x1817, 0x53b, 0x5, 0x2, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xffff, 0x8, 0x3, 0xe3a, 0x7, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x3ff, 0xffff, 0x0, 0x9, 0x1, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x19, 0x24, 0x9, 0xc, 0x16, 0x24, 0x24, 0x4, 0x3, 0x18, 0xd, 0x24, 0x4, 0x4, 0x48, 0x6d, 0x18, 0x18, 0x1b, 0x1b, 0x18, 0x6, 0x5, 0xc, 0x1, 0x30, 0x5, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {}, {0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x1}, {0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x2, 0x2, 0x2, 0x6c, 0x12, 0x24, 0x67, 0x0, 0x36, 0x6, 0x2]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x4, 0x1, 0x4, 0xb, 0x16, 0x9, 0x5b, 0x1b, 0x4, 0x6, 0x5, 0x16, 0x18, 0x5, 0x6f, 0x2, 0x0, 0x30, 0x1, 0x1, 0x3, 0x48, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xe5f, 0x4, 0x400, 0x7, 0x4d24, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x30, 0x60, 0xc, 0x1b, 0x1, 0x3, 0x36, 0x6c, 0x7f, 0x2, 0x24, 0x24, 0x6c, 0x1b, 0x24, 0xb, 0x6c, 0x3, 0x3, 0x9, 0x6, 0x12, 0x3, 0x16, 0x5, 0x18, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x3, 0xc1d, 0x8, 0x81, 0x8]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb10f, 0x40, 0x0, 0x2, 0x6, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7fff, 0x1f, 0xfffc, 0x1, 0x9, 0xff, 0x2cb5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x1, 0x12, 0x48, 0x3, 0x0, 0x18, 0x45, 0x60, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x100, 0x3, 0xfff9, 0x651b, 0x7, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x1, 0x400, 0x8, 0x7, 0x8001, 0xc1]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0xa}, {0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3f, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x91]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9, 0xff, 0x479, 0x9, 0x3f, 0x53]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x36, 0x3, 0xc, 0x24, 0x1, 0x18, 0x12, 0x6, 0x12, 0x0, 0x5, 0xc, 0x48, 0x12, 0x3, 0x30, 0x1, 0xa, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x60, 0x6f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xffff, 0x0, 0x1, 0x9c7, 0x8000, 0x5, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x8, 0x81, 0x0, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x5, 0x2}, {}, {0x6, 0x8}, {0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x6, 0xc}, {0x3, 0x5}, {0x3, 0x2}, {0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4}, {0x5, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x14, 0xd, 0x3, 0x7ff, 0xf000, 0x9, 0x5]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6, 0x1, 0x3, 0x7, 0xff, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x101, 0x7257, 0x9, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0x400, 0x1, 0x9, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x1}, {0x4, 0x8}, {0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {}, {0x5, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x12}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x12, 0x24, 0x7d136dea69cc58a9, 0x60, 0x48, 0xc, 0x1, 0x2, 0x9, 0x16, 0x5, 0x71, 0x9, 0x6, 0x1b, 0xc, 0x60, 0x0, 0x36, 0x6c, 0x1, 0x16, 0x1, 0x0, 0x36, 0x5, 0x14, 0x16, 0x6c, 0x4, 0x6c]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x36, 0x6c, 0x29, 0x1, 0x60, 0x16, 0xb, 0x16, 0xc, 0xb, 0xc, 0x48, 0x3, 0x4, 0x1e, 0x6, 0x9, 0x9, 0x6, 0x2, 0x36, 0xb, 0x60, 0x48, 0x4, 0x48, 0x60, 0x6c, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xefa, 0x80, 0x7, 0x6, 0x800, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfff, 0x1ff, 0x5f, 0xfff, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x7}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x6, 0x15}, {0x0, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x32ab, 0xca4, 0xc03, 0xfff9, 0x6, 0x1f]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x15, 0x18, 0x9, 0x6, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x338, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x105, 0x2b, 0x5, 0x0, 0x5, 0xffff]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x4}, {0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x1a}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x16, 0x2, 0x12, 0x30, 0x3, 0x6c, 0x5, 0xc, 0x12, 0x12, 0x4a, 0x60, 0x4]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x2, 0x6c, 0x48, 0x30, 0x0, 0x1b, 0x16, 0x6c, 0x1, 0xb, 0x1, 0x2, 0x9, 0x6c, 0x49, 0x24, 0x5, 0x30, 0x6c, 0x9, 0x3, 0xb, 0x1, 0x1b, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x6, 0x18, 0x6c, 0xc, 0x24, 0x60, 0x1, 0x6c, 0x6, 0x12, 0xc, 0x36, 0x48, 0x30, 0x5, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x7, 0x7fff, 0x4, 0x1ff, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb0, 0x9e, 0x2, 0x8001, 0x7, 0x9, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x18, 0x30, 0x16, 0x0, 0xc, 0x24, 0x60, 0xc, 0x6c, 0x48, 0x1b, 0x1b, 0x3, 0x6c, 0x36, 0x2b, 0xc, 0x41, 0x4, 0x24, 0x5, 0x9, 0x3, 0xc, 0x1b, 0x0, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x4}, {}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x3, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7fff, 0x8000, 0xfe00, 0x101, 0x2d77, 0x3, 0xb6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x14}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {}, {}, {}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0xa}, {0x1}, {0x2, 0x2}, {0x5, 0x2}, {}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x1}, {0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x44c2, 0x7c40, 0x81, 0x40, 0x1, 0x5, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x2, 0x0, 0x2, 0x8001, 0xe3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x5684, 0x9, 0x20, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x7}, {0x7, 0x1}, {0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x4, 0xa}, {}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x24, 0x30, 0xc, 0x6c, 0x6, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x80, 0x7, 0x9, 0x1, 0x1ff, 0x1f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x81, 0x1, 0xfff8, 0x352, 0xbb08, 0xff81, 0xf1]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x5}, {0x0, 0xa}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x71, 0xc, 0x3, 0x36, 0x9, 0x30, 0x24, 0x2, 0x1, 0x5, 0x21, 0x1, 0x24, 0x36, 0x16, 0x4, 0x6, 0x48, 0x0, 0x9, 0x2, 0xb, 0x5, 0x1b, 0x36, 0x3, 0x4, 0xc, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1094}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) [ 410.264074][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.276500][T10364] block nbd5: NBD_DISCONNECT 02:06:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab07) 02:06:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 410.328402][T10373] block nbd3: shutting down sockets [ 410.344895][T10364] block nbd5: Disconnected due to user request. [ 410.355172][T10374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 410.406472][T10364] block nbd5: shutting down sockets 02:06:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xfc24cfcc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab08) [ 410.488713][T10392] block nbd4: NBD_DISCONNECT [ 410.510245][T10390] block nbd5: NBD_DISCONNECT [ 410.517459][T10390] block nbd5: Disconnected due to user request. [ 410.530951][T10390] block nbd5: shutting down sockets [ 410.536720][ T3715] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 410.561367][T10393] block nbd1: shutting down sockets [ 410.966554][ T3715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.976766][ T3715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.985615][ T3715] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 410.996080][ T3715] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 411.005174][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.078487][ T3715] hub 1-1:1.0: bad descriptor, ignoring hub [ 411.084466][ T3715] hub: probe of 1-1:1.0 failed with error -5 [ 411.090855][ T3715] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 411.397742][ T27] usb 1-1: USB disconnect, device number 49 02:06:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="004000000000000000272f37b1016b6212657068153177ae07d9dbe107b49df2e3bc6baecde020a9b55432d0bf8fcb86c92143001266649ae7bf419f35cd14c2f6911d709d9c37bcb463e3eefed672c776abe72a8fb8c93dedf7db86c3ae49fd2418eb9e3ad3fbbc89de05e9a8d1dc4562486c4c0194a61d3ac7c90418b1c78717c9b896a33eb30669ab9a15b8ac4c864f33fed005a14513f904d60e4ff637c2a7680e78bc1260c7bc3e72fa1cfffa4e9fd28eeb3c1d342addf02a5fea14dd6e7f26f10120b91385c81563f92b646555262b53c72148d5347a993ad75c8d5aee1a7e1f556465"], &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x9, "d7196021"}, @local, @main=@item_4={0x3, 0x0, 0x8, "747f5369"}, @local=@item_012={0x1, 0x2, 0x4, "ea"}, @main=@item_012={0x2, 0x0, 0xc, "dbc0"}, @global=@item_4={0x3, 0x1, 0x5, "b15da288"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xb, "84c5f931"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4d, 0x1, {0x22, 0xef7}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x742ccaabafcf8867, 0x30, 0xb, "859d28f4bada25c15948c0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xdf}, &(0x7f00000003c0)={0x20, 0x1, 0x36, "67201f040f1d791e0f5bccd46b36b7b9ec6b0b6b625bf5dfee54a02145121efbe17226141073b0898b124a220c2aa5a7e590e33622a9"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x13, {0x13, 0x4, "f0ed2d1a9f5e9150638dc89894a1192c3e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "70a61135740f34c0e20a14b55ff75dfeb55ceade8913350027a36c65169bf454a68880f764d49808240aa63f6505c23bc3c7106275fe07cba893f9cde614af29818e749b6caf9a72b808914fc8a8b28cb3d5178a4f585c556655f78d"}}, &(0x7f0000000640)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x5, [@generic={0x100, 0x10, 0x1, "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"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7f, 0xc7, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "fa2381dcc06128a6ebc5de72b1cbffe0"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xff, 0x0, "6c074ccc", "d53a33fc"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1c, 0xe0, 0x7, 0x8, 0x81, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000840)={0x20, 0xf, 0xf8, "c97cca8601a16eb7d320f1ca34d65cad92a712e86b40fd8d3164d88620b641008624dcd83368c684462a477efbd0af471f91a09c1e354b48d200c291fb3340871f4dc71b587f2cb00279ab2536f00480635803efea17bcbbfc1479cbc31f12a99634367cde15d22b53e88d43315e9c4511a739cd30b893384f4473ee1d0452182653557945ad5998303f23b839071b660ca5211e21851282f7abf197e3f2dc488bb3d4e49d51e088390090cd25f1b99c4458331e886f59cf96c44d02dd6d266d597349ee7bb2a7b90a70d1c4f3f0cc1b2f8f67b1ab2c69f835a4018bfbc29b0206f2b5e7ecfead91782f5ffbe07974b9dea9396fb08845a7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x800, 0x2f929c81f1190376}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ddf"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "ea30"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) ioctl$NBD_DO_IT(r1, 0xab03) 02:06:20 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf6ffffff00000000) 02:06:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab09) 02:06:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xffffe000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 02:06:20 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) pipe(&(0x7f0000009500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$caif(r1, &(0x7f0000009540)=@dbg={0x25, 0x9, 0x8}, 0x18) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000001400)="7ea12c6d1d179afb1858259a7eeda05c11dc0bea8056292e9b2767e069e8e650c2ac90c814cc19a1bb06085c879c3593a11619737bec2f1a3ff32160678e1db5b5756d2429e72c51d5cd58f704bbbe46b00be2225e5e71e82d6fa33c29e8f7c128b4dcdc3a6c993eb12a8d60a87d425dbc459b", 0x73) clock_gettime(0x0, &(0x7f0000009480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=""/14, 0xe}, 0x7}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)=""/234, 0xea}, 0x4}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/29, 0x1d}, {&(0x7f0000002c00)=""/248, 0xf8}, {&(0x7f0000002d00)=""/34, 0x22}], 0x5, &(0x7f0000002dc0)=""/4087, 0xff7}, 0x8}, {{&(0x7f0000003dc0)=@un=@abs, 0x80, &(0x7f0000005040)=[{&(0x7f0000003e40)=""/77, 0x4d}, {&(0x7f0000003ec0)=""/163, 0xa3}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f00000013c0)=""/40, 0x28}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5}, 0xd7}, {{0x0, 0x0, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/31, 0x1f}, 0x9a5}, {{&(0x7f0000005180)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f0000005200)=""/212, 0xd4}, {&(0x7f0000005300)=""/113, 0x71}, {&(0x7f0000005380)=""/167, 0xa7}, {&(0x7f0000005440)=""/6, 0x6}, {&(0x7f0000005480)=""/31, 0x1f}, {&(0x7f00000054c0)=""/172, 0xac}, {&(0x7f0000005580)=""/147, 0x93}, {&(0x7f0000005640)=""/162, 0xa2}], 0x8, &(0x7f0000005780)=""/135, 0x87}}, {{&(0x7f0000005840)=@ax25={{0x3, @default}, [@null, @netrom, @netrom, @rose, @default, @remote, @bcast, @rose]}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000058c0)=""/41, 0x29}, {&(0x7f0000005900)=""/3, 0x3}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f00000059c0)=""/114, 0x72}, {&(0x7f0000005a40)=""/4096, 0x1000}], 0x5, &(0x7f0000006ac0)=""/22, 0x16}, 0x9}, {{&(0x7f0000006b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000006b80)=""/208, 0xd0}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000006d40)=""/4096, 0x1000}], 0x3, &(0x7f0000007d80)=""/195, 0xfffffffffffffdd2}, 0xffffffff}, {{&(0x7f0000007e80)=@alg, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/66, 0x42}, {&(0x7f0000007f80)=""/54, 0x36}], 0x2, &(0x7f0000001540)=""/226, 0xe2}, 0x2}, {{&(0x7f0000008100)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008180)=""/4096, 0x1000}], 0x1, &(0x7f00000091c0)=""/61, 0x3d}, 0x3ff}], 0xa, 0x2001, &(0x7f00000094c0)={r3, r4+60000000}) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001640)='wg1\x00', 0x4) 02:06:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab0a) 02:06:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x400448c9) [ 411.838745][T10398] block nbd5: NBD_DISCONNECT [ 411.843414][T10398] block nbd5: Disconnected due to user request. [ 411.866109][T10398] block nbd5: shutting down sockets [ 411.867664][T10405] block nbd1: shutting down sockets 02:06:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$NBD_DO_IT(r0, 0xab03) (async, rerun: 32) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 02:06:20 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) pipe(&(0x7f0000009500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$caif(r1, &(0x7f0000009540)=@dbg={0x25, 0x9, 0x8}, 0x18) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000001400)="7ea12c6d1d179afb1858259a7eeda05c11dc0bea8056292e9b2767e069e8e650c2ac90c814cc19a1bb06085c879c3593a11619737bec2f1a3ff32160678e1db5b5756d2429e72c51d5cd58f704bbbe46b00be2225e5e71e82d6fa33c29e8f7c128b4dcdc3a6c993eb12a8d60a87d425dbc459b", 0x73) clock_gettime(0x0, &(0x7f0000009480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=""/14, 0xe}, 0x7}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)=""/234, 0xea}, 0x4}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/29, 0x1d}, {&(0x7f0000002c00)=""/248, 0xf8}, {&(0x7f0000002d00)=""/34, 0x22}], 0x5, &(0x7f0000002dc0)=""/4087, 0xff7}, 0x8}, {{&(0x7f0000003dc0)=@un=@abs, 0x80, &(0x7f0000005040)=[{&(0x7f0000003e40)=""/77, 0x4d}, {&(0x7f0000003ec0)=""/163, 0xa3}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f00000013c0)=""/40, 0x28}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5}, 0xd7}, {{0x0, 0x0, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/31, 0x1f}, 0x9a5}, {{&(0x7f0000005180)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f0000005200)=""/212, 0xd4}, {&(0x7f0000005300)=""/113, 0x71}, {&(0x7f0000005380)=""/167, 0xa7}, {&(0x7f0000005440)=""/6, 0x6}, {&(0x7f0000005480)=""/31, 0x1f}, {&(0x7f00000054c0)=""/172, 0xac}, {&(0x7f0000005580)=""/147, 0x93}, {&(0x7f0000005640)=""/162, 0xa2}], 0x8, &(0x7f0000005780)=""/135, 0x87}}, {{&(0x7f0000005840)=@ax25={{0x3, @default}, [@null, @netrom, @netrom, @rose, @default, @remote, @bcast, @rose]}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000058c0)=""/41, 0x29}, {&(0x7f0000005900)=""/3, 0x3}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f00000059c0)=""/114, 0x72}, {&(0x7f0000005a40)=""/4096, 0x1000}], 0x5, &(0x7f0000006ac0)=""/22, 0x16}, 0x9}, {{&(0x7f0000006b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000006b80)=""/208, 0xd0}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000006d40)=""/4096, 0x1000}], 0x3, &(0x7f0000007d80)=""/195, 0xfffffffffffffdd2}, 0xffffffff}, {{&(0x7f0000007e80)=@alg, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/66, 0x42}, {&(0x7f0000007f80)=""/54, 0x36}], 0x2, &(0x7f0000001540)=""/226, 0xe2}, 0x2}, {{&(0x7f0000008100)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008180)=""/4096, 0x1000}], 0x1, &(0x7f00000091c0)=""/61, 0x3d}, 0x3ff}], 0xa, 0x2001, &(0x7f00000094c0)={r3, r4+60000000}) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001640)='wg1\x00', 0x4) socket$caif_seqpacket(0x25, 0x5, 0x4) (async) pipe(&(0x7f0000009500)) (async) connect$caif(r1, &(0x7f0000009540)=@dbg={0x25, 0x9, 0x8}, 0x18) (async) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000001400)="7ea12c6d1d179afb1858259a7eeda05c11dc0bea8056292e9b2767e069e8e650c2ac90c814cc19a1bb06085c879c3593a11619737bec2f1a3ff32160678e1db5b5756d2429e72c51d5cd58f704bbbe46b00be2225e5e71e82d6fa33c29e8f7c128b4dcdc3a6c993eb12a8d60a87d425dbc459b", 0x73) (async) clock_gettime(0x0, &(0x7f0000009480)) (async) recvmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=""/14, 0xe}, 0x7}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)=""/234, 0xea}, 0x4}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/29, 0x1d}, {&(0x7f0000002c00)=""/248, 0xf8}, {&(0x7f0000002d00)=""/34, 0x22}], 0x5, &(0x7f0000002dc0)=""/4087, 0xff7}, 0x8}, {{&(0x7f0000003dc0)=@un=@abs, 0x80, &(0x7f0000005040)=[{&(0x7f0000003e40)=""/77, 0x4d}, {&(0x7f0000003ec0)=""/163, 0xa3}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f00000013c0)=""/40, 0x28}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5}, 0xd7}, {{0x0, 0x0, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/31, 0x1f}, 0x9a5}, {{&(0x7f0000005180)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f0000005200)=""/212, 0xd4}, {&(0x7f0000005300)=""/113, 0x71}, {&(0x7f0000005380)=""/167, 0xa7}, {&(0x7f0000005440)=""/6, 0x6}, {&(0x7f0000005480)=""/31, 0x1f}, {&(0x7f00000054c0)=""/172, 0xac}, {&(0x7f0000005580)=""/147, 0x93}, {&(0x7f0000005640)=""/162, 0xa2}], 0x8, &(0x7f0000005780)=""/135, 0x87}}, {{&(0x7f0000005840)=@ax25={{0x3, @default}, [@null, @netrom, @netrom, @rose, @default, @remote, @bcast, @rose]}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000058c0)=""/41, 0x29}, {&(0x7f0000005900)=""/3, 0x3}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f00000059c0)=""/114, 0x72}, {&(0x7f0000005a40)=""/4096, 0x1000}], 0x5, &(0x7f0000006ac0)=""/22, 0x16}, 0x9}, {{&(0x7f0000006b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000006b80)=""/208, 0xd0}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000006d40)=""/4096, 0x1000}], 0x3, &(0x7f0000007d80)=""/195, 0xfffffffffffffdd2}, 0xffffffff}, {{&(0x7f0000007e80)=@alg, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/66, 0x42}, {&(0x7f0000007f80)=""/54, 0x36}], 0x2, &(0x7f0000001540)=""/226, 0xe2}, 0x2}, {{&(0x7f0000008100)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008180)=""/4096, 0x1000}], 0x1, &(0x7f00000091c0)=""/61, 0x3d}, 0x3ff}], 0xa, 0x2001, &(0x7f00000094c0)={r3, r4+60000000}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001640)='wg1\x00', 0x4) (async) [ 411.894469][T10399] block nbd3: shutting down sockets 02:06:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x400448dd) [ 411.963675][T10413] block nbd5: NBD_DISCONNECT [ 411.969003][T10413] block nbd5: Disconnected due to user request. [ 411.975433][T10413] block nbd5: shutting down sockets [ 412.048466][T10422] block nbd1: shutting down sockets [ 412.065686][T10426] block nbd3: shutting down sockets [ 412.071394][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 412.146486][ T6] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 412.346466][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 412.488196][ T27] usb 3-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 412.497346][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.507225][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.517388][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 412.526305][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 412.537128][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 412.547372][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.601653][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 412.607664][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 412.614000][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 412.918145][ T3684] usb 1-1: USB disconnect, device number 50 [ 413.218625][T10400] block nbd2: Unsupported socket: shutdown callout must be supported. 02:06:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="004000000000000000272f37b1016b6212657068153177ae07d9dbe107b49df2e3bc6baecde020a9b55432d0bf8fcb86c92143001266649ae7bf419f35cd14c2f6911d709d9c37bcb463e3eefed672c776abe72a8fb8c93dedf7db86c3ae49fd2418eb9e3ad3fbbc89de05e9a8d1dc4562486c4c0194a61d3ac7c90418b1c78717c9b896a33eb30669ab9a15b8ac4c864f33fed005a14513f904d60e4ff637c2a7680e78bc1260c7bc3e72fa1cfffa4e9fd28eeb3c1d342addf02a5fea14dd6e7f26f10120b91385c81563f92b646555262b53c72148d5347a993ad75c8d5aee1a7e1f556465"], &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x9, "d7196021"}, @local, @main=@item_4={0x3, 0x0, 0x8, "747f5369"}, @local=@item_012={0x1, 0x2, 0x4, "ea"}, @main=@item_012={0x2, 0x0, 0xc, "dbc0"}, @global=@item_4={0x3, 0x1, 0x5, "b15da288"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xb, "84c5f931"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4d, 0x1, {0x22, 0xef7}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x742ccaabafcf8867, 0x30, 0xb, "859d28f4bada25c15948c0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xdf}, &(0x7f00000003c0)={0x20, 0x1, 0x36, "67201f040f1d791e0f5bccd46b36b7b9ec6b0b6b625bf5dfee54a02145121efbe17226141073b0898b124a220c2aa5a7e590e33622a9"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x13, {0x13, 0x4, "f0ed2d1a9f5e9150638dc89894a1192c3e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "70a61135740f34c0e20a14b55ff75dfeb55ceade8913350027a36c65169bf454a68880f764d49808240aa63f6505c23bc3c7106275fe07cba893f9cde614af29818e749b6caf9a72b808914fc8a8b28cb3d5178a4f585c556655f78d"}}, &(0x7f0000000640)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x5, [@generic={0x100, 0x10, 0x1, "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"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7f, 0xc7, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "fa2381dcc06128a6ebc5de72b1cbffe0"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xff, 0x0, "6c074ccc", "d53a33fc"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1c, 0xe0, 0x7, 0x8, 0x81, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000840)={0x20, 0xf, 0xf8, "c97cca8601a16eb7d320f1ca34d65cad92a712e86b40fd8d3164d88620b641008624dcd83368c684462a477efbd0af471f91a09c1e354b48d200c291fb3340871f4dc71b587f2cb00279ab2536f00480635803efea17bcbbfc1479cbc31f12a99634367cde15d22b53e88d43315e9c4511a739cd30b893384f4473ee1d0452182653557945ad5998303f23b839071b660ca5211e21851282f7abf197e3f2dc488bb3d4e49d51e088390090cd25f1b99c4458331e886f59cf96c44d02dd6d266d597349ee7bb2a7b90a70d1c4f3f0cc1b2f8f67b1ab2c69f835a4018bfbc29b0206f2b5e7ecfead91782f5ffbe07974b9dea9396fb08845a7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x800, 0x2f929c81f1190376}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ddf"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "ea30"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) ioctl$NBD_DO_IT(r1, 0xab03) syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="004000000000000000272f37b1016b6212657068153177ae07d9dbe107b49df2e3bc6baecde020a9b55432d0bf8fcb86c92143001266649ae7bf419f35cd14c2f6911d709d9c37bcb463e3eefed672c776abe72a8fb8c93dedf7db86c3ae49fd2418eb9e3ad3fbbc89de05e9a8d1dc4562486c4c0194a61d3ac7c90418b1c78717c9b896a33eb30669ab9a15b8ac4c864f33fed005a14513f904d60e4ff637c2a7680e78bc1260c7bc3e72fa1cfffa4e9fd28eeb3c1d342addf02a5fea14dd6e7f26f10120b91385c81563f92b646555262b53c72148d5347a993ad75c8d5aee1a7e1f556465"], &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x9, "d7196021"}, @local, @main=@item_4={0x3, 0x0, 0x8, "747f5369"}, @local=@item_012={0x1, 0x2, 0x4, "ea"}, @main=@item_012={0x2, 0x0, 0xc, "dbc0"}, @global=@item_4={0x3, 0x1, 0x5, "b15da288"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xb, "84c5f931"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4d, 0x1, {0x22, 0xef7}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x742ccaabafcf8867, 0x30, 0xb, "859d28f4bada25c15948c0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xdf}, &(0x7f00000003c0)={0x20, 0x1, 0x36, "67201f040f1d791e0f5bccd46b36b7b9ec6b0b6b625bf5dfee54a02145121efbe17226141073b0898b124a220c2aa5a7e590e33622a9"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x13, {0x13, 0x4, "f0ed2d1a9f5e9150638dc89894a1192c3e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "70a61135740f34c0e20a14b55ff75dfeb55ceade8913350027a36c65169bf454a68880f764d49808240aa63f6505c23bc3c7106275fe07cba893f9cde614af29818e749b6caf9a72b808914fc8a8b28cb3d5178a4f585c556655f78d"}}, &(0x7f0000000640)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x5, [@generic={0x100, 0x10, 0x1, "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"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7f, 0xc7, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "fa2381dcc06128a6ebc5de72b1cbffe0"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xff, 0x0, "6c074ccc", "d53a33fc"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1c, 0xe0, 0x7, 0x8, 0x81, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000840)={0x20, 0xf, 0xf8, "c97cca8601a16eb7d320f1ca34d65cad92a712e86b40fd8d3164d88620b641008624dcd83368c684462a477efbd0af471f91a09c1e354b48d200c291fb3340871f4dc71b587f2cb00279ab2536f00480635803efea17bcbbfc1479cbc31f12a99634367cde15d22b53e88d43315e9c4511a739cd30b893384f4473ee1d0452182653557945ad5998303f23b839071b660ca5211e21851282f7abf197e3f2dc488bb3d4e49d51e088390090cd25f1b99c4458331e886f59cf96c44d02dd6d266d597349ee7bb2a7b90a70d1c4f3f0cc1b2f8f67b1ab2c69f835a4018bfbc29b0206f2b5e7ecfead91782f5ffbe07974b9dea9396fb08845a7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x800, 0x2f929c81f1190376}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ddf"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "ea30"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) (async) creat(&(0x7f0000000000)='./file0\x00', 0x21) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) 02:06:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x400454ca) 02:06:23 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) pipe(&(0x7f0000009500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$caif(r1, &(0x7f0000009540)=@dbg={0x25, 0x9, 0x8}, 0x18) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000001400)="7ea12c6d1d179afb1858259a7eeda05c11dc0bea8056292e9b2767e069e8e650c2ac90c814cc19a1bb06085c879c3593a11619737bec2f1a3ff32160678e1db5b5756d2429e72c51d5cd58f704bbbe46b00be2225e5e71e82d6fa33c29e8f7c128b4dcdc3a6c993eb12a8d60a87d425dbc459b", 0x73) clock_gettime(0x0, &(0x7f0000009480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=""/14, 0xe}, 0x7}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)=""/234, 0xea}, 0x4}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/29, 0x1d}, {&(0x7f0000002c00)=""/248, 0xf8}, {&(0x7f0000002d00)=""/34, 0x22}], 0x5, &(0x7f0000002dc0)=""/4087, 0xff7}, 0x8}, {{&(0x7f0000003dc0)=@un=@abs, 0x80, &(0x7f0000005040)=[{&(0x7f0000003e40)=""/77, 0x4d}, {&(0x7f0000003ec0)=""/163, 0xa3}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f00000013c0)=""/40, 0x28}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5}, 0xd7}, {{0x0, 0x0, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/31, 0x1f}, 0x9a5}, {{&(0x7f0000005180)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f0000005200)=""/212, 0xd4}, {&(0x7f0000005300)=""/113, 0x71}, {&(0x7f0000005380)=""/167, 0xa7}, {&(0x7f0000005440)=""/6, 0x6}, {&(0x7f0000005480)=""/31, 0x1f}, {&(0x7f00000054c0)=""/172, 0xac}, {&(0x7f0000005580)=""/147, 0x93}, {&(0x7f0000005640)=""/162, 0xa2}], 0x8, &(0x7f0000005780)=""/135, 0x87}}, {{&(0x7f0000005840)=@ax25={{0x3, @default}, [@null, @netrom, @netrom, @rose, @default, @remote, @bcast, @rose]}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000058c0)=""/41, 0x29}, {&(0x7f0000005900)=""/3, 0x3}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f00000059c0)=""/114, 0x72}, {&(0x7f0000005a40)=""/4096, 0x1000}], 0x5, &(0x7f0000006ac0)=""/22, 0x16}, 0x9}, {{&(0x7f0000006b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000006b80)=""/208, 0xd0}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000006d40)=""/4096, 0x1000}], 0x3, &(0x7f0000007d80)=""/195, 0xfffffffffffffdd2}, 0xffffffff}, {{&(0x7f0000007e80)=@alg, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/66, 0x42}, {&(0x7f0000007f80)=""/54, 0x36}], 0x2, &(0x7f0000001540)=""/226, 0xe2}, 0x2}, {{&(0x7f0000008100)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008180)=""/4096, 0x1000}], 0x1, &(0x7f00000091c0)=""/61, 0x3d}, 0x3ff}], 0xa, 0x2001, &(0x7f00000094c0)={r3, r4+60000000}) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001640)='wg1\x00', 0x4) socket$caif_seqpacket(0x25, 0x5, 0x4) (async) pipe(&(0x7f0000009500)) (async) connect$caif(r1, &(0x7f0000009540)=@dbg={0x25, 0x9, 0x8}, 0x18) (async) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000001400)="7ea12c6d1d179afb1858259a7eeda05c11dc0bea8056292e9b2767e069e8e650c2ac90c814cc19a1bb06085c879c3593a11619737bec2f1a3ff32160678e1db5b5756d2429e72c51d5cd58f704bbbe46b00be2225e5e71e82d6fa33c29e8f7c128b4dcdc3a6c993eb12a8d60a87d425dbc459b", 0x73) (async) clock_gettime(0x0, &(0x7f0000009480)) (async) recvmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=""/14, 0xe}, 0x7}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)=""/234, 0xea}, 0x4}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/29, 0x1d}, {&(0x7f0000002c00)=""/248, 0xf8}, {&(0x7f0000002d00)=""/34, 0x22}], 0x5, &(0x7f0000002dc0)=""/4087, 0xff7}, 0x8}, {{&(0x7f0000003dc0)=@un=@abs, 0x80, &(0x7f0000005040)=[{&(0x7f0000003e40)=""/77, 0x4d}, {&(0x7f0000003ec0)=""/163, 0xa3}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f00000013c0)=""/40, 0x28}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5}, 0xd7}, {{0x0, 0x0, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/31, 0x1f}, 0x9a5}, {{&(0x7f0000005180)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f0000005200)=""/212, 0xd4}, {&(0x7f0000005300)=""/113, 0x71}, {&(0x7f0000005380)=""/167, 0xa7}, {&(0x7f0000005440)=""/6, 0x6}, {&(0x7f0000005480)=""/31, 0x1f}, {&(0x7f00000054c0)=""/172, 0xac}, {&(0x7f0000005580)=""/147, 0x93}, {&(0x7f0000005640)=""/162, 0xa2}], 0x8, &(0x7f0000005780)=""/135, 0x87}}, {{&(0x7f0000005840)=@ax25={{0x3, @default}, [@null, @netrom, @netrom, @rose, @default, @remote, @bcast, @rose]}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000058c0)=""/41, 0x29}, {&(0x7f0000005900)=""/3, 0x3}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f00000059c0)=""/114, 0x72}, {&(0x7f0000005a40)=""/4096, 0x1000}], 0x5, &(0x7f0000006ac0)=""/22, 0x16}, 0x9}, {{&(0x7f0000006b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000006b80)=""/208, 0xd0}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000006d40)=""/4096, 0x1000}], 0x3, &(0x7f0000007d80)=""/195, 0xfffffffffffffdd2}, 0xffffffff}, {{&(0x7f0000007e80)=@alg, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/66, 0x42}, {&(0x7f0000007f80)=""/54, 0x36}], 0x2, &(0x7f0000001540)=""/226, 0xe2}, 0x2}, {{&(0x7f0000008100)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008180)=""/4096, 0x1000}], 0x1, &(0x7f00000091c0)=""/61, 0x3d}, 0x3ff}], 0xa, 0x2001, &(0x7f00000094c0)={r3, r4+60000000}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001640)='wg1\x00', 0x4) (async) 02:06:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x100) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 02:06:23 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffff00000000) 02:06:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40049409) [ 414.790151][T10400] block nbd2: shutting down sockets [ 414.816652][ T27] Bluetooth: Can't get version to change to load ram patch err [ 414.824436][ T27] Bluetooth: Loading sysconfig file failed [ 414.866357][ T27] ath3k: probe of 3-1:7.0 failed with error -71 [ 414.887572][T10436] block nbd3: shutting down sockets [ 414.899986][T10439] block nbd5: NBD_DISCONNECT [ 414.900770][ T27] usb 3-1: USB disconnect, device number 6 02:06:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40081271) 02:06:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) fstat(r2, &(0x7f0000000000)) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000080)) 02:06:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40086602) 02:06:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 414.926132][T10439] block nbd5: Disconnected due to user request. [ 414.955054][T10439] block nbd5: shutting down sockets 02:06:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40101283) [ 415.044540][T10455] block nbd5: NBD_DISCONNECT [ 415.053372][T10455] block nbd5: Disconnected due to user request. [ 415.061205][T10455] block nbd5: shutting down sockets [ 415.086571][ T6] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 415.296293][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 415.446585][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.461417][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.473218][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 415.485388][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 415.495321][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.533155][T10433] block nbd1: shutting down sockets [ 415.538675][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 415.551306][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 415.557881][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 415.564865][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 415.681025][ T27] usb 3-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 415.690546][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.810249][ T3636] block nbd3: Receive control failed (result -32) [ 415.810652][T10457] block nbd3: shutting down sockets [ 415.868106][ T6] usb 1-1: USB disconnect, device number 51 [ 416.428988][T10461] block nbd2: Unsupported socket: shutdown callout must be supported. 02:06:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="004000000000000000272f37b1016b6212657068153177ae07d9dbe107b49df2e3bc6baecde020a9b55432d0bf8fcb86c92143001266649ae7bf419f35cd14c2f6911d709d9c37bcb463e3eefed672c776abe72a8fb8c93dedf7db86c3ae49fd2418eb9e3ad3fbbc89de05e9a8d1dc4562486c4c0194a61d3ac7c90418b1c78717c9b896a33eb30669ab9a15b8ac4c864f33fed005a14513f904d60e4ff637c2a7680e78bc1260c7bc3e72fa1cfffa4e9fd28eeb3c1d342addf02a5fea14dd6e7f26f10120b91385c81563f92b646555262b53c72148d5347a993ad75c8d5aee1a7e1f556465"], &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x9, "d7196021"}, @local, @main=@item_4={0x3, 0x0, 0x8, "747f5369"}, @local=@item_012={0x1, 0x2, 0x4, "ea"}, @main=@item_012={0x2, 0x0, 0xc, "dbc0"}, @global=@item_4={0x3, 0x1, 0x5, "b15da288"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xb, "84c5f931"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4d, 0x1, {0x22, 0xef7}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x742ccaabafcf8867, 0x30, 0xb, "859d28f4bada25c15948c0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xdf}, &(0x7f00000003c0)={0x20, 0x1, 0x36, "67201f040f1d791e0f5bccd46b36b7b9ec6b0b6b625bf5dfee54a02145121efbe17226141073b0898b124a220c2aa5a7e590e33622a9"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x13, {0x13, 0x4, "f0ed2d1a9f5e9150638dc89894a1192c3e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "70a61135740f34c0e20a14b55ff75dfeb55ceade8913350027a36c65169bf454a68880f764d49808240aa63f6505c23bc3c7106275fe07cba893f9cde614af29818e749b6caf9a72b808914fc8a8b28cb3d5178a4f585c556655f78d"}}, &(0x7f0000000640)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x5, [@generic={0x100, 0x10, 0x1, "8252898eebcd1f47d0d2042450c26869976f39f5c043c6bca158eca4ffd583369277782fe2dde624a92ca8d27b2eedb2f7f516ef9c93de01c8abcfd44ad39a7fd2ac61485590c4d5eb749243648199c1bc8a312b0aaa82d7cf40a452c3aacd9a076e0a2f7c881b72e917b72e6c1290e3867ac09d2279f4aeff9fc17aba0bdee6040a5c95b9b9645ad383200cde04a4cb9f17062eecbd4cba259aca86eac80f654dc3396083621dc8f72d735d4a9809a9db6758f23eae916070c21559f201f0d41550d5a3f593855a296edc94ed5cafaff01aacea41b05f04339babe6062089ff74ec793492d39af0c2e1cfbf804def398a1f5ebc47b78eec3a0cdda96e"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7f, 0xc7, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "fa2381dcc06128a6ebc5de72b1cbffe0"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xff, 0x0, "6c074ccc", "d53a33fc"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1c, 0xe0, 0x7, 0x8, 0x81, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000840)={0x20, 0xf, 0xf8, "c97cca8601a16eb7d320f1ca34d65cad92a712e86b40fd8d3164d88620b641008624dcd83368c684462a477efbd0af471f91a09c1e354b48d200c291fb3340871f4dc71b587f2cb00279ab2536f00480635803efea17bcbbfc1479cbc31f12a99634367cde15d22b53e88d43315e9c4511a739cd30b893384f4473ee1d0452182653557945ad5998303f23b839071b660ca5211e21851282f7abf197e3f2dc488bb3d4e49d51e088390090cd25f1b99c4458331e886f59cf96c44d02dd6d266d597349ee7bb2a7b90a70d1c4f3f0cc1b2f8f67b1ab2c69f835a4018bfbc29b0206f2b5e7ecfead91782f5ffbe07974b9dea9396fb08845a7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x800, 0x2f929c81f1190376}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ddf"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "ea30"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) ioctl$NBD_DO_IT(r1, 0xab03) syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="004000000000000000272f37b1016b6212657068153177ae07d9dbe107b49df2e3bc6baecde020a9b55432d0bf8fcb86c92143001266649ae7bf419f35cd14c2f6911d709d9c37bcb463e3eefed672c776abe72a8fb8c93dedf7db86c3ae49fd2418eb9e3ad3fbbc89de05e9a8d1dc4562486c4c0194a61d3ac7c90418b1c78717c9b896a33eb30669ab9a15b8ac4c864f33fed005a14513f904d60e4ff637c2a7680e78bc1260c7bc3e72fa1cfffa4e9fd28eeb3c1d342addf02a5fea14dd6e7f26f10120b91385c81563f92b646555262b53c72148d5347a993ad75c8d5aee1a7e1f556465"], &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x9, "d7196021"}, @local, @main=@item_4={0x3, 0x0, 0x8, "747f5369"}, @local=@item_012={0x1, 0x2, 0x4, "ea"}, @main=@item_012={0x2, 0x0, 0xc, "dbc0"}, @global=@item_4={0x3, 0x1, 0x5, "b15da288"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xb, "84c5f931"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4d, 0x1, {0x22, 0xef7}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x742ccaabafcf8867, 0x30, 0xb, "859d28f4bada25c15948c0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xdf}, &(0x7f00000003c0)={0x20, 0x1, 0x36, "67201f040f1d791e0f5bccd46b36b7b9ec6b0b6b625bf5dfee54a02145121efbe17226141073b0898b124a220c2aa5a7e590e33622a9"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x13, {0x13, 0x4, "f0ed2d1a9f5e9150638dc89894a1192c3e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "70a61135740f34c0e20a14b55ff75dfeb55ceade8913350027a36c65169bf454a68880f764d49808240aa63f6505c23bc3c7106275fe07cba893f9cde614af29818e749b6caf9a72b808914fc8a8b28cb3d5178a4f585c556655f78d"}}, &(0x7f0000000640)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x5, [@generic={0x100, 0x10, 0x1, "8252898eebcd1f47d0d2042450c26869976f39f5c043c6bca158eca4ffd583369277782fe2dde624a92ca8d27b2eedb2f7f516ef9c93de01c8abcfd44ad39a7fd2ac61485590c4d5eb749243648199c1bc8a312b0aaa82d7cf40a452c3aacd9a076e0a2f7c881b72e917b72e6c1290e3867ac09d2279f4aeff9fc17aba0bdee6040a5c95b9b9645ad383200cde04a4cb9f17062eecbd4cba259aca86eac80f654dc3396083621dc8f72d735d4a9809a9db6758f23eae916070c21559f201f0d41550d5a3f593855a296edc94ed5cafaff01aacea41b05f04339babe6062089ff74ec793492d39af0c2e1cfbf804def398a1f5ebc47b78eec3a0cdda96e"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7f, 0xc7, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "fa2381dcc06128a6ebc5de72b1cbffe0"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xff, 0x0, "6c074ccc", "d53a33fc"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1c, 0xe0, 0x7, 0x8, 0x81, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000840)={0x20, 0xf, 0xf8, "c97cca8601a16eb7d320f1ca34d65cad92a712e86b40fd8d3164d88620b641008624dcd83368c684462a477efbd0af471f91a09c1e354b48d200c291fb3340871f4dc71b587f2cb00279ab2536f00480635803efea17bcbbfc1479cbc31f12a99634367cde15d22b53e88d43315e9c4511a739cd30b893384f4473ee1d0452182653557945ad5998303f23b839071b660ca5211e21851282f7abf197e3f2dc488bb3d4e49d51e088390090cd25f1b99c4458331e886f59cf96c44d02dd6d266d597349ee7bb2a7b90a70d1c4f3f0cc1b2f8f67b1ab2c69f835a4018bfbc29b0206f2b5e7ecfead91782f5ffbe07974b9dea9396fb08845a7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x800, 0x2f929c81f1190376}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ddf"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "ea30"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) (async) creat(&(0x7f0000000000)='./file0\x00', 0x21) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) 02:06:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40101286) 02:06:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x100) (rerun: 64) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 02:06:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) fstat(r2, &(0x7f0000000000)) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) fstat(r2, &(0x7f0000000000)) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000080)) (async) 02:06:24 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffff000) [ 416.489347][T10461] UDC core: couldn't find an available UDC or it's busy: -16 [ 416.500147][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 416.501836][T10441] block nbd2: shutting down sockets [ 416.526353][ T27] Bluetooth: Can't get version to change to load ram patch err 02:06:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40101288) [ 416.546373][ T27] Bluetooth: Loading sysconfig file failed [ 416.559194][ T27] ath3k: probe of 3-1:7.0 failed with error -71 [ 416.603627][ T27] usb 3-1: USB disconnect, device number 7 [ 416.626434][T10494] block nbd5: NBD_DISCONNECT [ 416.636362][T10494] block nbd5: Disconnected due to user request. 02:06:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401070c9) 02:06:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 416.653030][T10494] block nbd5: shutting down sockets 02:06:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401070ca) 02:06:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401070cd) [ 416.734505][T10493] block nbd3: shutting down sockets [ 416.770404][T10499] block nbd3: Device being setup by another task 02:06:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) fstat(r2, &(0x7f0000000000)) ioctl$NBD_DO_IT(r0, 0xab03) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) fstat(r2, &(0x7f0000000000)) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000080)) (async) [ 416.789976][T10507] block nbd5: NBD_DISCONNECT [ 416.794704][T10507] block nbd5: Disconnected due to user request. [ 416.826788][T10507] block nbd5: shutting down sockets [ 416.846584][ T6] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 416.966277][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 416.996792][T10513] block nbd3: shutting down sockets [ 417.190382][T10479] block nbd1: shutting down sockets [ 417.216274][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 417.236360][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.253087][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.264448][ T6] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 417.282953][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 417.292305][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.346611][ T27] usb 3-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 417.347562][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 417.355686][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.371036][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 417.377568][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 417.667642][ T6] usb 1-1: USB disconnect, device number 52 [ 418.108357][T10490] block nbd2: Unsupported socket: shutdown callout must be supported. 02:06:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0xf, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_io_uring_setup(0x495d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}, 0x5) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r8, r9, 0x0, 0x8000002b) r10 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r9, &(0x7f0000000040)={0x18601, 0x3, 0x2}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x1) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x40186366) 02:06:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x100) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x100) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) 02:06:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x23, 0xa1, {0xa1, 0x31, "2050698e0fa8ccf45b9c29a58d364232d653b0ee74fb1f6a9840711c9d22c3bc7f53ab6c1782d84b9ca1b65230527db650b5828fae8e6e3009bbcb3e978bad58fbe11e7e8c533e512cb57e537e8392ee06bce77e37f34c459f693c58111a3e0798cf20281eba4609c6aa5f1bb903cfdab74a975228457c2e7e2f7dd6169f79e5ddceb7bd5567f432a3f90db65bd6e43a815351443e7b5ae860d651d4d23f25"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x8, 0xf5, "09bd53ad8ac04b11b68347af494916bd51823d11f783d0951c61145c3fb1ab2fdb6c52c1f8d84f0f2e58fa25d37f81355b3fdc2a0f88a26c30a628a7d2227d57b50cb34a27a94cb279f89b8db8fcc4145824f4ccb21d155264fb7e54be5966e029794e62e04b2c31223b25c4f3d2e76e552245ee4ecaaadfe4caf7edb516eacbff0073ff4628acd1c667743084bec3403630776e26edbbf86554541685a8a67002fe1b21c3f55455aa36d88395e137dfc2e66da9b7928e2d113bb019f2d929cd780d9506d6919b799262ec3d7dc8b2b42bd0c900db13d27428f728a4c88f221e6d092fcc1512aa24d82324ea535bd29b28147c1b82"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xff82, 0xd4, 0x80, 0x3f, 0x3, 0x9, 0xffff, 0x8, 0xfffe, 0x0, 0x9a1, 0x4}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) [ 418.171280][T10490] block nbd2: shutting down sockets [ 418.197862][ T27] Bluetooth: Can't get version to change to load ram patch err [ 418.205454][ T27] Bluetooth: Loading sysconfig file failed [ 418.221123][ T27] ath3k: probe of 3-1:7.0 failed with error -71 02:06:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401870c8) [ 418.260103][ T27] usb 3-1: USB disconnect, device number 8 [ 418.268647][T10529] block nbd5: shutting down sockets 02:06:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401870cb) 02:06:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401870cc) [ 418.388536][T10548] nbd: must specify an index to disconnect [ 418.420594][T10546] block nbd5: shutting down sockets 02:06:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1b, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 418.440935][T10535] block nbd1: shutting down sockets 02:06:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 418.476526][ T6] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 418.590388][T10564] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.606128][T10564] nbd: must specify an index to disconnect [ 418.612982][T10563] block nbd5: shutting down sockets [ 418.846544][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 418.855269][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.886265][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.896694][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.916331][ T6] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 418.925401][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.040847][ T3636] block nbd3: Receive control failed (result -32) [ 419.043224][T10549] block nbd3: shutting down sockets 02:06:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x8000002b) (async, rerun: 32) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x401c5820) 02:06:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x32, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_io_uring_setup(0x495d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}, 0x5) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r8, r9, 0x0, 0x8000002b) (async) r10 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) (async) syz_io_uring_submit(r6, r3, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r9, &(0x7f0000000040)={0x18601, 0x3, 0x2}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x1) ioctl$NBD_DO_IT(r0, 0xab03) [ 419.178314][T10568] block nbd5: shutting down sockets [ 419.305725][T10576] block nbd3: shutting down sockets [ 419.446725][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 419.452689][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 419.498435][ T6] usb 1-1: USB disconnect, device number 53 02:06:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x23, 0xa1, {0xa1, 0x31, "2050698e0fa8ccf45b9c29a58d364232d653b0ee74fb1f6a9840711c9d22c3bc7f53ab6c1782d84b9ca1b65230527db650b5828fae8e6e3009bbcb3e978bad58fbe11e7e8c533e512cb57e537e8392ee06bce77e37f34c459f693c58111a3e0798cf20281eba4609c6aa5f1bb903cfdab74a975228457c2e7e2f7dd6169f79e5ddceb7bd5567f432a3f90db65bd6e43a815351443e7b5ae860d651d4d23f25"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x8, 0xf5, "09bd53ad8ac04b11b68347af494916bd51823d11f783d0951c61145c3fb1ab2fdb6c52c1f8d84f0f2e58fa25d37f81355b3fdc2a0f88a26c30a628a7d2227d57b50cb34a27a94cb279f89b8db8fcc4145824f4ccb21d155264fb7e54be5966e029794e62e04b2c31223b25c4f3d2e76e552245ee4ecaaadfe4caf7edb516eacbff0073ff4628acd1c667743084bec3403630776e26edbbf86554541685a8a67002fe1b21c3f55455aa36d88395e137dfc2e66da9b7928e2d113bb019f2d929cd780d9506d6919b799262ec3d7dc8b2b42bd0c900db13d27428f728a4c88f221e6d092fcc1512aa24d82324ea535bd29b28147c1b82"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xff82, 0xd4, 0x80, 0x3f, 0x3, 0x9, 0xffff, 0x8, 0xfffe, 0x0, 0x9a1, 0x4}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 02:06:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 02:06:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x4020940d) 02:06:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_io_uring_setup(0x495d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}, 0x5) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r8, r9, 0x0, 0x8000002b) (async) r10 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r9, &(0x7f0000000040)={0x18601, 0x3, 0x2}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x1) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0xc0, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) (async, rerun: 32) ioctl$NBD_DO_IT(r0, 0xab03) (rerun: 32) 02:06:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80041284) 02:06:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 419.998414][T10588] block nbd5: shutting down sockets [ 420.001730][T10596] block nbd3: shutting down sockets 02:06:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0xec0, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80041285) [ 420.167323][T10610] block nbd5: shutting down sockets [ 420.256849][ T3684] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 420.706433][ T3684] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 420.715293][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.725535][ T3684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 420.734937][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.748702][ T3684] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 420.757769][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.893883][ T3636] block nbd3: Receive control failed (result -32) [ 420.894830][T10608] block nbd3: shutting down sockets [ 421.268426][ T3684] hub 1-1:1.0: bad descriptor, ignoring hub [ 421.274443][ T3684] hub: probe of 1-1:1.0 failed with error -5 [ 421.327485][ T3684] usb 1-1: USB disconnect, device number 54 02:06:30 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102000d240f0100000000000000000006241a2000000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x23, 0xa1, {0xa1, 0x31, "2050698e0fa8ccf45b9c29a58d364232d653b0ee74fb1f6a9840711c9d22c3bc7f53ab6c1782d84b9ca1b65230527db650b5828fae8e6e3009bbcb3e978bad58fbe11e7e8c533e512cb57e537e8392ee06bce77e37f34c459f693c58111a3e0798cf20281eba4609c6aa5f1bb903cfdab74a975228457c2e7e2f7dd6169f79e5ddceb7bd5567f432a3f90db65bd6e43a815351443e7b5ae860d651d4d23f25"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x8, 0xf5, "09bd53ad8ac04b11b68347af494916bd51823d11f783d0951c61145c3fb1ab2fdb6c52c1f8d84f0f2e58fa25d37f81355b3fdc2a0f88a26c30a628a7d2227d57b50cb34a27a94cb279f89b8db8fcc4145824f4ccb21d155264fb7e54be5966e029794e62e04b2c31223b25c4f3d2e76e552245ee4ecaaadfe4caf7edb516eacbff0073ff4628acd1c667743084bec3403630776e26edbbf86554541685a8a67002fe1b21c3f55455aa36d88395e137dfc2e66da9b7928e2d113bb019f2d929cd780d9506d6919b799262ec3d7dc8b2b42bd0c900db13d27428f728a4c88f221e6d092fcc1512aa24d82324ea535bd29b28147c1b82"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xff82, 0xd4, 0x80, 0x3f, 0x3, 0x9, 0xffff, 0x8, 0xfffe, 0x0, 0x9a1, 0x4}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102000d240f0100000000000000000006241a2000000905"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x23, 0xa1, {0xa1, 0x31, "2050698e0fa8ccf45b9c29a58d364232d653b0ee74fb1f6a9840711c9d22c3bc7f53ab6c1782d84b9ca1b65230527db650b5828fae8e6e3009bbcb3e978bad58fbe11e7e8c533e512cb57e537e8392ee06bce77e37f34c459f693c58111a3e0798cf20281eba4609c6aa5f1bb903cfdab74a975228457c2e7e2f7dd6169f79e5ddceb7bd5567f432a3f90db65bd6e43a815351443e7b5ae860d651d4d23f25"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x8, 0xf5, "09bd53ad8ac04b11b68347af494916bd51823d11f783d0951c61145c3fb1ab2fdb6c52c1f8d84f0f2e58fa25d37f81355b3fdc2a0f88a26c30a628a7d2227d57b50cb34a27a94cb279f89b8db8fcc4145824f4ccb21d155264fb7e54be5966e029794e62e04b2c31223b25c4f3d2e76e552245ee4ecaaadfe4caf7edb516eacbff0073ff4628acd1c667743084bec3403630776e26edbbf86554541685a8a67002fe1b21c3f55455aa36d88395e137dfc2e66da9b7928e2d113bb019f2d929cd780d9506d6919b799262ec3d7dc8b2b42bd0c900db13d27428f728a4c88f221e6d092fcc1512aa24d82324ea535bd29b28147c1b82"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xff82, 0xd4, 0x80, 0x3f, 0x3, 0x9, 0xffff, 0x8, 0xfffe, 0x0, 0x9a1, 0x4}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async) 02:06:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80081270) 02:06:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x33fe0, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendfile(r1, r3, 0x0, 0x8000002b) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') ioctl$NBD_SET_SOCK(r2, 0xab00, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 02:06:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80081272) 02:06:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 421.831506][T10621] block nbd5: shutting down sockets 02:06:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x7ffff000, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80081280) [ 421.870450][T10630] block nbd3: shutting down sockets 02:06:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async, rerun: 32) ioctl$NBD_DO_IT(r0, 0xab03) (rerun: 32) 02:06:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80086301) [ 421.897106][T10636] nbd1: detected capacity change from 0 to 8192 [ 421.950828][T10645] block nbd5: shutting down sockets [ 422.096321][ T3682] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 422.456622][ T3682] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 422.465385][ T3682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.476067][ T3682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 422.485490][ T3682] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.498497][ T3682] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 422.507689][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.600541][ T3651] block nbd2: Receive control failed (result -32) [ 422.603611][T10638] block nbd2: shutting down sockets [ 422.676154][ T3636] block nbd1: Receive control failed (result -104) [ 422.782214][ T3652] block nbd3: Receive control failed (result -32) [ 422.782627][T10651] block nbd3: shutting down sockets [ 422.977911][T10633] UDC core: couldn't find an available UDC or it's busy: -16 [ 422.985703][T10633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 422.997005][ T3682] hub 1-1:1.0: bad descriptor, ignoring hub [ 423.002910][ T3682] hub: probe of 1-1:1.0 failed with error -5 [ 423.327939][ T3684] usb 1-1: USB disconnect, device number 55 02:06:32 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a2000000905"], 0x0) r0 = syz_usb_connect$cdc_ncm(0x5, 0x17e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16c, 0x2, 0x1, 0x0, 0x30, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "f0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x9, 0xbbf, 0x3}, {0x6, 0x24, 0x1a, 0x54, 0x18}, [@mdlm_detail={0xfd, 0x24, 0x13, 0x20, "f4bcc159a5078a4c7cd4f08b0e774b91358de8b142a91e51deff8ef4cff80431e2217f826bc160e25800e36f0626aeccc60410eb939efe632950da69a6da562e161b3902015cbbdbc5a1e6fbe2e8502a49320f620fe7c87d8213a24876e3e37c27df6d166ddb34f3699dac2d82ad030c58421ef6f365c0e28e562497cd1c5c5a0dc3267d7e0cbe2d9d8e632cd92d1a7dd72ffb25dcdee78857131279181e848b51fa8c63cb4dea691e1e3332e4c07346069af044cec6cf9c05310b2162e6680efdf4fe825a43823a5ccf0901bab3c056c8d0b9e69173595bdae23e5d1b47082484865c499aa762c8040021b820917d320dbf3204b4ffc8b33d"}, @country_functional={0x12, 0x24, 0x7, 0x7f, 0x86e0, [0x64, 0x0, 0x4, 0x6, 0x5, 0x1000]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7f, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x7, 0x8d}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x7, 0xe8}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x0, 0x80, 0x5, 0x40, 0x3f}, 0xf8, &(0x7f0000000240)={0x5, 0xf, 0xf8, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x31, 0x6, 0x0, 0x8ce, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "c736d465dc121935df57ffc5949268e1"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c5, 0x7, 0xf5, 0xfff9, 0x73}, @generic={0xc6, 0x10, 0x0, "3626c17e077a5a8daab281a482c9f92e7de3ee826a0071c72822b48feff5cff6223453fff63b8f34cc30cb53711a0b3b0be8c7af5b202a0fa891f85c1a78d21a7aeaca7c6ba1386f4196eaa8014b4a1cdb582af7b46163005df2d6c4a9254149c55c2c007d6c62fe6de1124c10ebd0a07a6734e2e25059c0975b8d0f2a46a700e952619157fa22b3f0b9e6cd7c24abfb8fd9462289e61f3d41928b1ae7831b8636f1a792fb4b7899848c1bb53cc4665e9fb1d9eb2815e90431c66e07a7acd9845a963e"}]}, 0x5, [{0xa2, &(0x7f0000000340)=@string={0xa2, 0x3, "90f064db7ddba47b1abff5ac5987eb5d73984fb38ad2e568e89cefe61eb3e54e2a60a11c128c29878bf6ce8cce7bfa169d3e529cd0cc768dd341a178cb56b86b025e3af4ab63840e151108ffdb22c262b22e38dded1d705cf781e4103b8b92eefa35e1e793a4f497aa6096b020e4d1bbcc6f98ca0b289e3373534c4df6f0c9efa00f7503e81efdbe6fbe535484e17bafbc46cabeba5f60baa2a167ae446c7192"}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "30e78968fdfccbb28c92e38cab54c8da524fd419d5b6151a9d84d6f6fd321c60dbbb7515f67532f4527bab8410b009ef6e7bad2526f998d78d85112ef286ba469ad0651fb253ff0dcd4bec94a7bfb173e6dddba342a72a836b927e2e7508eeb452ecba664405f25764c67302aa4e0a7a9fb0eefbae9aff64e8b34c5709206964f3dd156d72ce6ab8b0b42b1828c1a6711db0484c0a538715587653b3c17f68806996fa6f3d9a7876dda769d1a1e1b639ba3ff6ecefaff177ccb30a09b7d8553f756b9cef2caa6eb33516"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1d}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0x8, 0x3f, {0x3f, 0x23, "9dd834e4303c5acfde6f25613dea4d87b48edd9d9023d2afb63399b4ea953314ffddab9c50fbc2ed1bc6afbc77a83af55e8be0029d65713bc8947e88f6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x20, 0x5, 0xa1, "0b3bb997887d50f14d38f0856e21c94a636bdc192a7bde537c79304a5976b90cc25eb67e560b77890dd3c553158a031819fafaeca3b8a6964952867963bc901b869f4aab7ed4f4bd894a07f18dea943b50e80e644c5e19606503294eafa44377e236830ee8fee33faf2a427a857a30860f2d421a54057cc4db246f9df9c205bc33155eba10abe45c4afeb7107ea1068cdf115ad3858b1b908c671a65994d964315"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x3dd, 0x7, 0x5, 0xba58, 0x2, 0x4bcb, 0x5, 0x8, 0x8, 0x750, 0x2, 0x2}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0xffffd7f0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 02:06:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x80086601) 02:06:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffdef, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:06:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="61df712bc81273d545dc7c722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendfile(r1, r3, 0x0, 0x8000002b) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') (rerun: 64) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) (async, rerun: 64) ioctl$NBD_DO_IT(r0, 0xab03) (rerun: 64) 02:06:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 02:06:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 02:06:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x801c581f) [ 423.767534][T10658] block nbd5: shutting down sockets [ 423.987083][T10674] block nbd2: server does not support multiple connections per device. [ 424.066445][ T3684] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 424.076626][T10674] block nbd2: server does not support multiple connections per device. [ 424.087661][T10674] block nbd2: server does not support multiple connections per device. [ 424.177234][T10674] block nbd2: server does not support multiple connections per device. [ 424.185879][T10674] block nbd2: server does not support multiple connections per device. [ 424.256847][T10674] block nbd2: server does not support multiple connections per device. [ 424.307562][T10674] block nbd2: server does not support multiple connections per device. [ 424.346533][T10674] block nbd2: server does not support multiple connections per device. [ 424.426900][T10674] block nbd2: server does not support multiple connections per device. [ 424.460569][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.471029][ T3684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 424.484068][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 424.494759][ T3684] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 424.508392][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.516664][T10674] block nbd2: server does not support multiple connections per device. [ 424.557956][ T3684] hub 1-1:1.0: bad descriptor, ignoring hub [ 424.563998][ T3684] hub: probe of 1-1:1.0 failed with error -5 [ 424.576675][T10674] block nbd2: server does not support multiple connections per device. [ 424.579027][ T3684] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 424.590656][T10674] block nbd2: shutting down sockets [ 424.762893][T10667] UDC core: couldn't find an available UDC or it's busy: -16 [ 424.770723][T10667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.909062][ T3684] usb 1-1: USB disconnect, device number 56 [ 439.347667][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.354034][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.146649][ T9] block nbd1: Possible stuck request ffff88801b4a8000: control (read@0,4096B). Runtime 30 seconds [ 482.533461][ T2964] udevd[2964]: worker [7972] /devices/virtual/block/nbd1 is taking a long time [ 500.797561][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.803928][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.237707][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.244023][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.266437][ T28] INFO: task udevd:7972 blocked for more than 143 seconds. [ 569.273870][ T28] Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 569.282203][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.290959][ T28] task:udevd state:D stack:26152 pid: 7972 ppid: 2964 flags:0x00004000 [ 569.300219][ T28] Call Trace: [ 569.303491][ T28] [ 569.306664][ T28] __schedule+0xa9a/0x4cc0 [ 569.311109][ T28] ? io_schedule_timeout+0x140/0x140 [ 569.316715][ T28] ? mark_held_locks+0x9f/0xe0 [ 569.321981][ T28] schedule+0xd2/0x1f0 [ 569.326059][ T28] io_schedule+0xba/0x130 [ 569.330456][ T28] folio_wait_bit_common+0x4f2/0xa90 [ 569.335937][ T28] ? next_uptodate_page+0x810/0x810 [ 569.341247][ T28] ? folio_add_lru+0x389/0x6a0 [ 569.346027][ T28] ? end_buffer_async_read_io+0x300/0x300 [ 569.353192][ T28] ? folio_unlock+0xc0/0xc0 [ 569.358015][ T28] ? alloc_pages+0x1b2/0x310 [ 569.362632][ T28] do_read_cache_folio+0x506/0x760 [ 569.367827][ T28] read_cache_page+0x59/0x2a0 [ 569.372513][ T28] read_part_sector+0xf6/0x920 [ 569.377318][ T28] ? adfspart_check_ADFS+0x410/0x410 [ 569.382627][ T28] adfspart_check_ICS+0x9a/0x690 [ 569.387632][ T28] ? __alloc_pages+0x3b6/0x500 [ 569.392397][ T28] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 569.399204][ T28] ? adfspart_check_ADFS+0x410/0x410 [ 569.404492][ T28] ? snprintf+0xbb/0xf0 [ 569.408692][ T28] ? vsprintf+0x30/0x30 [ 569.412891][ T28] ? alloc_pages+0x1b2/0x310 [ 569.417550][ T28] ? adfspart_check_ADFS+0x410/0x410 [ 569.423219][ T28] bdev_disk_changed+0x629/0xf60 [ 569.430055][ T28] ? iput.part.0+0x73/0x820 [ 569.434608][ T28] blkdev_get_whole+0x206/0x2d0 [ 569.439916][ T28] blkdev_get_by_dev.part.0+0x5d2/0xc80 [ 569.445484][ T28] ? devcgroup_check_permission+0x1ab/0x440 [ 569.451449][ T28] blkdev_get_by_dev+0x6b/0x80 [ 569.458780][ T28] blkdev_open+0x13c/0x2c0 [ 569.463419][ T28] do_dentry_open+0x4a1/0x11e0 [ 569.468429][ T28] ? blkdev_close+0x80/0x80 [ 569.472940][ T28] path_openat+0x1c71/0x2910 [ 569.477625][ T28] ? path_lookupat+0x860/0x860 [ 569.482405][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 569.488638][ T28] do_filp_open+0x1aa/0x400 [ 569.493155][ T28] ? may_open_dev+0xf0/0xf0 [ 569.497704][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 569.502668][ T28] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 569.508975][ T28] ? _find_next_bit+0x1e3/0x260 [ 569.513843][ T28] ? _raw_spin_unlock+0x24/0x40 [ 569.518746][ T28] ? alloc_fd+0x2f0/0x670 [ 569.523559][ T28] do_sys_openat2+0x16d/0x4c0 [ 569.528320][ T28] ? find_held_lock+0x2d/0x110 [ 569.533112][ T28] ? build_open_flags+0x6f0/0x6f0 [ 569.538188][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 569.543046][ T28] __x64_sys_openat+0x13f/0x1f0 [ 569.547963][ T28] ? __ia32_sys_open+0x1c0/0x1c0 [ 569.552921][ T28] ? syscall_enter_from_user_mode+0x21/0x70 [ 569.558879][ T28] do_syscall_64+0x35/0xb0 [ 569.563303][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 569.569462][ T28] RIP: 0033:0x7fe3eeb25697 [ 569.573918][ T28] RSP: 002b:00007ffcb4ce1840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.583313][ T28] RAX: ffffffffffffffda RBX: 00005588abe63190 RCX: 00007fe3eeb25697 [ 569.591440][ T28] RDX: 00000000000a0800 RSI: 00005588abe55a00 RDI: 00000000ffffff9c [ 569.599474][ T28] RBP: 00005588abe55a00 R08: 0000000000000001 R09: 00007ffcb4ce9080 [ 569.607515][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 569.615503][ T28] R13: 00005588abe61280 R14: 0000000000000001 R15: 00005588abe3d910 [ 569.623523][ T28] [ 569.627139][ T28] INFO: task syz-executor.1:10636 blocked for more than 143 seconds. [ 569.635397][ T28] Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 569.643049][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.651744][ T28] task:syz-executor.1 state:D stack:28408 pid:10636 ppid: 3630 flags:0x00004004 [ 569.661027][ T28] Call Trace: [ 569.664322][ T28] [ 569.667565][ T28] __schedule+0xa9a/0x4cc0 [ 569.672144][ T28] ? io_schedule_timeout+0x140/0x140 [ 569.679511][ T28] schedule+0xd2/0x1f0 [ 569.683596][ T28] schedule_preempt_disabled+0xf/0x20 [ 569.689030][ T28] __mutex_lock+0xa32/0x12f0 [ 569.693623][ T28] ? blkdev_put+0x99/0x950 [ 569.698109][ T28] ? mutex_lock_io_nested+0x1150/0x1150 [ 569.703651][ T28] ? file_fdatawait_range+0x60/0x60 [ 569.708899][ T28] ? _raw_spin_unlock+0x24/0x40 [ 569.713747][ T28] ? locks_remove_file+0x2f7/0x570 [ 569.718897][ T28] blkdev_put+0x99/0x950 [ 569.723160][ T28] blkdev_close+0x64/0x80 [ 569.727558][ T28] __fput+0x277/0x9d0 [ 569.731984][ T28] ? blkdev_fsync+0xa0/0xa0 [ 569.736578][ T28] task_work_run+0xdd/0x1a0 [ 569.741125][ T28] exit_to_user_mode_prepare+0x23c/0x250 [ 569.746883][ T28] syscall_exit_to_user_mode+0x19/0x60 [ 569.752353][ T28] do_syscall_64+0x42/0xb0 [ 569.756833][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 569.762736][ T28] RIP: 0033:0x7f5b08c890e9 [ 569.767222][ T28] RSP: 002b:00007f5b09d2d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.775644][ T28] RAX: 0000000000000000 RBX: 00007f5b08d9bf60 RCX: 00007f5b08c890e9 [ 569.783651][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 569.793677][ T28] RBP: 00007f5b08ce308d R08: 0000000000000000 R09: 0000000000000000 [ 569.801686][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.809697][ T28] R13: 00007ffcad0753ff R14: 00007f5b09d2d300 R15: 0000000000022000 [ 569.817984][ T28] [ 569.821018][ T28] [ 569.821018][ T28] Showing all locks held in the system: [ 569.828870][ T28] 3 locks held by kworker/u4:1/11: [ 569.834513][ T28] 1 lock held by khungtaskd/28: [ 569.839434][ T28] #0: ffffffff8bd820e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 569.849389][ T28] 2 locks held by getty/3276: [ 569.854226][ T28] #0: ffff88807f488098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 569.863996][ T28] #1: ffffc90002ce62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcea/0x1230 [ 569.874144][ T28] 1 lock held by udevd/7972: [ 569.879112][ T28] #0: ffff88801b22f918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xc80 [ 569.890230][ T28] 1 lock held by syz-executor.1/10636: [ 569.895700][ T28] #0: ffff88801b22f918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x99/0x950 [ 569.907817][ T28] [ 569.910136][ T28] ============================================= [ 569.910136][ T28] [ 569.919009][ T28] NMI backtrace for cpu 0 [ 569.923327][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 569.933202][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.943244][ T28] Call Trace: [ 569.946509][ T28] [ 569.949425][ T28] dump_stack_lvl+0xcd/0x134 [ 569.954010][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 569.959287][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 569.964490][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 569.970462][ T28] watchdog+0xc1d/0xf50 [ 569.974617][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 569.980688][ T28] kthread+0x2e9/0x3a0 [ 569.984754][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 569.990466][ T28] ret_from_fork+0x1f/0x30 [ 569.995234][ T28] [ 569.998855][ T28] Sending NMI from CPU 0 to CPUs 1: [ 570.004072][ C1] NMI backtrace for cpu 1 [ 570.004085][ C1] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 570.004105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.004116][ C1] Workqueue: bat_events batadv_nc_worker [ 570.004139][ C1] RIP: 0010:lockdep_hardirqs_off+0x3b/0xd0 [ 570.004160][ C1] Code: 2b 22 95 76 a9 00 00 f0 00 55 53 48 89 fb 74 49 8b 15 99 6b ee 06 85 d2 74 0e 65 8b 05 4a 29 95 76 85 c0 75 4e 5b 5d c3 9c 58 c4 02 74 eb e8 eb 11 87 fa 85 c0 74 ed 8b 05 19 08 4c 04 85 c0 [ 570.004175][ C1] RSP: 0018:ffffc900000d7bc8 EFLAGS: 00000046 [ 570.004187][ C1] RAX: 0000000000000046 RBX: ffffffff8147ce33 RCX: 0000000000000001 [ 570.004198][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 [ 570.004207][ C1] RBP: ffffffff8907a595 R08: 0000000000000000 R09: ffff88801cd640c3 [ 570.004218][ C1] R10: ffffed10039ac818 R11: 0000000000000000 R12: ffff88801cd6d828 [ 570.004228][ C1] R13: ffff88801cd6cd00 R14: dffffc0000000000 R15: ffffffff8907a7f0 [ 570.004243][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 570.004258][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.004269][ C1] CR2: 000000c0042dd1b8 CR3: 0000000023880000 CR4: 0000000000350ee0 [ 570.004279][ C1] Call Trace: [ 570.004283][ C1] [ 570.004288][ C1] ? batadv_nc_purge_paths+0x2a5/0x3a0 [ 570.004306][ C1] trace_hardirqs_off+0x13/0x1b0 [ 570.004324][ C1] ? batadv_nc_purge_paths+0x2a5/0x3a0 [ 570.004341][ C1] __local_bh_enable_ip+0xc3/0x120 [ 570.004357][ C1] batadv_nc_purge_paths+0x2a5/0x3a0 [ 570.004378][ C1] batadv_nc_worker+0x8f9/0xfa0 [ 570.004398][ C1] process_one_work+0x996/0x1610 [ 570.004417][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 570.004435][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 570.004454][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 570.004473][ C1] worker_thread+0x665/0x1080 [ 570.004492][ C1] ? process_one_work+0x1610/0x1610 [ 570.004508][ C1] kthread+0x2e9/0x3a0 [ 570.004522][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 570.004538][ C1] ret_from_fork+0x1f/0x30 [ 570.004559][ C1] [ 570.005813][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 570.221150][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 570.231022][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.241058][ T28] Call Trace: [ 570.244321][ T28] [ 570.247237][ T28] dump_stack_lvl+0xcd/0x134 [ 570.251839][ T28] panic+0x2d7/0x636 [ 570.255727][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 570.261700][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 570.266883][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 570.272246][ T28] ? nmi_trigger_cpumask_backtrace+0x1c9/0x230 [ 570.278394][ T28] ? watchdog.cold+0x130/0x158 [ 570.283146][ T28] watchdog.cold+0x141/0x158 [ 570.287724][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 570.293706][ T28] kthread+0x2e9/0x3a0 [ 570.297756][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 570.303375][ T28] ret_from_fork+0x1f/0x30 [ 570.307792][ T28] [ 570.312698][ T28] Kernel Offset: disabled [ 570.317059][ T28] Rebooting in 86400 seconds..