Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/08/07 20:38:39 fuzzer started 2020/08/07 20:38:40 dialing manager at 10.128.0.26:45451 2020/08/07 20:38:41 syscalls: 3255 2020/08/07 20:38:41 code coverage: enabled 2020/08/07 20:38:41 comparison tracing: enabled 2020/08/07 20:38:41 extra coverage: enabled 2020/08/07 20:38:41 setuid sandbox: enabled 2020/08/07 20:38:41 namespace sandbox: enabled 2020/08/07 20:38:41 Android sandbox: enabled 2020/08/07 20:38:41 fault injection: enabled 2020/08/07 20:38:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/07 20:38:41 net packet injection: enabled 2020/08/07 20:38:41 net device setup: enabled 2020/08/07 20:38:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/07 20:38:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/07 20:38:41 USB emulation: enabled 2020/08/07 20:38:41 hci packet injection: enabled 20:41:08 executing program 0: syzkaller login: [ 321.953993][ T28] audit: type=1400 audit(1596832868.064:8): avc: denied { execmem } for pid=8494 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 322.367464][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 322.705154][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 322.861148][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.868580][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.878760][ T8495] device bridge_slave_0 entered promiscuous mode [ 322.922035][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.929928][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.939773][ T8495] device bridge_slave_1 entered promiscuous mode [ 323.003086][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.021377][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.081676][ T8495] team0: Port device team_slave_0 added [ 323.096769][ T8495] team0: Port device team_slave_1 added [ 323.150110][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.157518][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.184997][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.210514][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.217707][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.243916][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.321031][ T8495] device hsr_slave_0 entered promiscuous mode [ 323.331099][ T8495] device hsr_slave_1 entered promiscuous mode [ 323.644823][ T8495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.699690][ T8495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.732368][ T8495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.768300][ T8495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.113454][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.158318][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.168612][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.191759][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.227428][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.238441][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.248062][ T3205] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.255369][ T3205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.329693][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.339788][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.349981][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.359608][ T3205] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.366864][ T3205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.376006][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.387449][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.406636][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.417945][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.431156][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.453183][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.464541][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.521037][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.531484][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.541429][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.551443][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.582437][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.655792][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.663706][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.706915][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.789284][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.801165][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.891288][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.901623][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.916366][ T8495] device veth0_vlan entered promiscuous mode [ 324.929007][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.938880][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.973087][ T8495] device veth1_vlan entered promiscuous mode [ 325.074275][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.084127][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.094348][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.104669][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.142105][ T8495] device veth0_macvtap entered promiscuous mode [ 325.173202][ T8495] device veth1_macvtap entered promiscuous mode [ 325.244812][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.254041][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.263896][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.273638][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.283959][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.316010][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.324064][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.334468][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:41:13 executing program 0: 20:41:13 executing program 0: 20:41:13 executing program 0: 20:41:14 executing program 0: 20:41:14 executing program 0: 20:41:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r1, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000072ddfc4a44ee599100000000000000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa"], 0x2c}}, 0x0) 20:41:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x1f) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 328.788286][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 328.869600][ T8736] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 329.064313][ T8738] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 20:41:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc, 0x5f}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x74) timer_create(0x4, &(0x7f0000000040)={0x0, 0xc, 0x4, @thr={&(0x7f00000000c0)="83d2c4cdd1370fc6cbf2956b42014bd0774f2364a5bdd7ae82127ee3ed4df8cf902a12351aa04d2a85abd974fa0468f134c51a65e56ab185b3197f937b361220241993474f94bf240f10c9c27326a14f0b04634b93dfb878dd6dd61ab57ebec44d506baa4769d2f9e851d62a96190b0004c19d6d89aabc4779f8450e8856abcf1dd273bc039395b8e7c5761b4d2ec9fefa3823e87e6f3073d665369495e647e7fe", &(0x7f0000000180)="d02ea8df8d7ab6504f7ab029216a4f4015da19aef30baf27b313012496fb1ed84b134f10987ab3c01db6e0bd9acfac8bd9d87474f2f9a342827b75a76fdab0e93e1c6eafe92a4e57cb71627f6280ca3c578fa56c8078de2d4b8378ec18006fbdabb2b04256f2cd4fbe3a25b205ab951d852b"}}, &(0x7f0000000200)=0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r1, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000280)) timer_gettime(r0, &(0x7f0000000240)) 20:41:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}, {@nls={'nls', 0x3d, 'koi8-r'}}]}) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r3}) 20:41:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:41:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xffffff3a) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000002c0)={@nfc={0x27, 0x1, 0x1, 0x5}, {&(0x7f0000000240)=""/100, 0x64}, &(0x7f0000000140), 0x31}, 0xa0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./bus\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT=r1]) [ 330.058557][ T8755] ntfs: (device loop0): parse_options(): Unrecognized mount option ÿÿÿÿÿÿÿÿ00000000000000000000004. [ 330.187279][ T8758] ntfs: (device loop0): parse_options(): Unrecognized mount option ÿÿÿÿÿÿÿÿ00000000000000000000004. 20:41:16 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000000c0)={0x7, 0x8000}) [ 330.868390][ T3489] Bluetooth: hci0: command 0x041b tx timeout 20:41:17 executing program 0: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002d000511d21380648c63940d0224fc60040006400a0003000200000037153e370a00018004000300d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffffe94}, 0x0) 20:41:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8800000010003b0efec000"/20, @ANYRES32=0x0, @ANYBLOB="dd0c32b7000000fc08000a00", @ANYRES32=0x6, @ANYBLOB="9e2c000000000000697036746e6c00005000020014000300f7d10000008e258a74000000000000010800080039003a0014000200ff"], 0x88}}, 0x0) r1 = openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x480c00, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@remote, 0x5e, r6}) [ 331.864277][ T8777] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.878188][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.908957][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.924553][ T8777] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.940131][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.975940][ T8783] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 20:41:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xfd47) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d40c, 0x0, 0x1f4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0xd5, &(0x7f0000000040)="d395477f00b9caca649c21145c246f9f495d721455c108aaac42430bfe5a3afce4c1efe7b005331ca67fb1a8076d448bbae78b281af4810d402eb90ee2f0892745ad40281dbc5e3a0c5ffedebba5d18586d4a65983c4076ab30738471ca6c7b7f50f0629f5e6b6ea82624b4b0f9f94faa8aa48d73f67919a1625835bc4060ecefb2b6715005fc56e1a1e28a477d0f1b3309e21df1ae4398cc127f99c171a7bf8a0b64f81147218d0ed505bff83f9729d7c20d0e0ca2fd4524ec4bcab4123ef753e97f2aad9b7902683a8a5e11e8bc9a53d08c934ac"}) [ 332.948622][ T3489] Bluetooth: hci0: command 0x040f tx timeout 20:41:19 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x4000) ioctl$TIOCSIG(r0, 0x40045436, 0x3d) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={[], [], @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000240)) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x400100, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x5, 0x109580) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x83, "9dc40a4765e75c2dedb15c0de9afda1f216021ffda4bea2764f881904e8704379c28bd19f17e380dc6fe87beb3be6f64ae4bb9e25d4d1dec9a81ed6af147a77319a1c2c7336a67b34a47d737304e5f3ef3d69e2c7adc7cc96bc8b69605e45683ad2aab62dabb8e41d17ca84d0f2d530da797f907e4400972d45f157afde4c65564ca64"}, &(0x7f0000000440)=0x8b) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)={r3, 0x11, "760619b41ad83b20f246a7dd0e02afa581"}, &(0x7f00000004c0)=0x19) socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat$mice(0xffffff9c, &(0x7f0000000500)='/dev/input/mice\x00', 0x180) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x48851}, 0x4040981) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs_stats\x00') openat$cgroup_devices(r5, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", ""]}, 0x14}}, 0x8044) ioctl$CHAR_RAW_FLSBUF(r1, 0x1261, &(0x7f00000007c0)=0x7) r6 = openat$autofs(0xffffff9c, &(0x7f0000000a80)='/dev/autofs\x00', 0x80, 0x0) bind$packet(r6, &(0x7f0000000b00)={0x11, 0x5c8af249d9037b19, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) [ 333.223968][ T28] audit: type=1400 audit(1596832879.333:9): avc: denied { execmem } for pid=8798 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:41:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xfd47) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d40c, 0x0, 0x1f4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0xd5, &(0x7f0000000040)="d395477f00b9caca649c21145c246f9f495d721455c108aaac42430bfe5a3afce4c1efe7b005331ca67fb1a8076d448bbae78b281af4810d402eb90ee2f0892745ad40281dbc5e3a0c5ffedebba5d18586d4a65983c4076ab30738471ca6c7b7f50f0629f5e6b6ea82624b4b0f9f94faa8aa48d73f67919a1625835bc4060ecefb2b6715005fc56e1a1e28a477d0f1b3309e21df1ae4398cc127f99c171a7bf8a0b64f81147218d0ed505bff83f9729d7c20d0e0ca2fd4524ec4bcab4123ef753e97f2aad9b7902683a8a5e11e8bc9a53d08c934ac"}) [ 334.035387][ T8804] IPVS: ftp: loaded support on port[0] = 21 20:41:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xfd47) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d40c, 0x0, 0x1f4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0xd5, &(0x7f0000000040)="d395477f00b9caca649c21145c246f9f495d721455c108aaac42430bfe5a3afce4c1efe7b005331ca67fb1a8076d448bbae78b281af4810d402eb90ee2f0892745ad40281dbc5e3a0c5ffedebba5d18586d4a65983c4076ab30738471ca6c7b7f50f0629f5e6b6ea82624b4b0f9f94faa8aa48d73f67919a1625835bc4060ecefb2b6715005fc56e1a1e28a477d0f1b3309e21df1ae4398cc127f99c171a7bf8a0b64f81147218d0ed505bff83f9729d7c20d0e0ca2fd4524ec4bcab4123ef753e97f2aad9b7902683a8a5e11e8bc9a53d08c934ac"}) [ 334.705739][ T8804] chnl_net:caif_netlink_parms(): no params data found [ 335.009452][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.016878][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.026722][ T8804] device bridge_slave_0 entered promiscuous mode [ 335.037915][ T27] Bluetooth: hci0: command 0x0419 tx timeout [ 335.153432][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.160969][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.170816][ T8804] device bridge_slave_1 entered promiscuous mode [ 335.392162][ T8804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.468391][ T8804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.597666][ T8804] team0: Port device team_slave_0 added [ 335.724952][ T8804] team0: Port device team_slave_1 added 20:41:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xfd47) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d40c, 0x0, 0x1f4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0xd5, &(0x7f0000000040)="d395477f00b9caca649c21145c246f9f495d721455c108aaac42430bfe5a3afce4c1efe7b005331ca67fb1a8076d448bbae78b281af4810d402eb90ee2f0892745ad40281dbc5e3a0c5ffedebba5d18586d4a65983c4076ab30738471ca6c7b7f50f0629f5e6b6ea82624b4b0f9f94faa8aa48d73f67919a1625835bc4060ecefb2b6715005fc56e1a1e28a477d0f1b3309e21df1ae4398cc127f99c171a7bf8a0b64f81147218d0ed505bff83f9729d7c20d0e0ca2fd4524ec4bcab4123ef753e97f2aad9b7902683a8a5e11e8bc9a53d08c934ac"}) [ 335.814401][ T8804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.822712][ T8804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.849012][ T8804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.944214][ T8804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.951441][ T8804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.977632][ T8804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.291336][ T8804] device hsr_slave_0 entered promiscuous mode [ 336.328167][ T8804] device hsr_slave_1 entered promiscuous mode [ 336.366411][ T8804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.374292][ T8804] Cannot create hsr debugfs directory 20:41:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0xa0) flock(r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x100, 0x3}}) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x8001f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r4 = open(&(0x7f0000000440)='./file0\x00', 0x22703, 0x171) flock(0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='memory.current\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x6) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000480)={0xa70000, 0x67, 0x204, r0, 0x0, &(0x7f0000000340)={0x9b0970, 0x3, [], @p_u32=&(0x7f0000000140)}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000240), 0x12) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x81000) write$FUSE_STATFS(r5, &(0x7f0000000280)={0x60, 0xffffffffffffffda, 0x2, {{0x8fd, 0x2, 0x0, 0x0, 0x200, 0x5, 0xc6d, 0xca2a}}}, 0x60) [ 337.205412][ T8804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.273239][ T8804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.320682][ T8804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.380507][ T8804] netdevsim netdevsim1 netdevsim3: renamed from eth3 20:41:23 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in=@local}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}]}}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r5, 0x0) mknodat(r5, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c086, 0x5) 20:41:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in=@local}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}]}}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x203, 0x0) flock(r5, 0x0) mknodat(r5, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c086, 0x5) [ 337.968543][ T8804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.019562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.029967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.059222][ T8804] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.089438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.099661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.109167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.116495][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.180246][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.190404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.200542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.210276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.217510][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.226775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.237835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.341516][ T8804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.353157][ T8804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.383460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.394340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.404850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.416006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 20:41:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32=r3], 0x20}}], 0x2, 0x0) [ 338.426519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.436306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.446787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.456747][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.497522][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.507626][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.625344][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.633655][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.707647][ T8804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.733924][ T9039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.881143][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.891837][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 20:41:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32=r3], 0x20}}], 0x2, 0x0) [ 339.030914][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.040825][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.080423][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.089867][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.122119][ T8804] device veth0_vlan entered promiscuous mode [ 339.216015][ T8804] device veth1_vlan entered promiscuous mode [ 339.376662][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.387346][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.425261][ T8804] device veth0_macvtap entered promiscuous mode 20:41:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32=r3], 0x20}}], 0x2, 0x0) [ 339.525790][ T8804] device veth1_macvtap entered promiscuous mode [ 339.652012][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 339.663095][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.679212][ T8804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.689622][ T3489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.699557][ T3489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.709453][ T3489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.719711][ T3489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.872973][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 339.884417][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.899050][ T8804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.908940][ T3489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 20:41:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32=r3], 0x20}}], 0x2, 0x0) [ 339.919451][ T3489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:41:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) socket(0x10, 0x803, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:27 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@private1={0xfc, 0x1, [], 0x1}, 0x60, r6}) 20:41:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0x4, "949b98ccd7a1e332633ef7c803e7312b2ed951008154bac946842d17032c37b25c2569c714bf60ab511c32bc93f15b384fc0ecdd0bacffa02de9aa27b63beb28633a6a78a3af28108535a53992e2e2cc114a170bfb98d11d4fcb0e9d72dbd69c15bd8eaf4437dc716599358237bc9362d4c25f02c233345710235777460472eb"}) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 342.551082][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd 20:41:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 342.921896][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.932536][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.941793][ T27] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 343.111547][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.120885][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.129258][ T27] usb 2-1: Product: syz [ 343.133597][ T27] usb 2-1: Manufacturer: syz [ 343.138349][ T27] usb 2-1: SerialNumber: syz 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 343.351428][ T8705] Bluetooth: hci1: command 0x0409 tx timeout [ 343.421396][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.462704][ T9075] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.569530][ T27] usb 2-1: 0:2 : does not exist 20:41:29 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 343.621878][ T27] usb 2-1: USB disconnect, device number 2 20:41:29 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:30 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 344.300238][ T8705] usb 2-1: new high-speed USB device number 3 using dummy_hcd 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 344.680913][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.691294][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.700594][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 344.881609][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.890951][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.899419][ T8705] usb 2-1: Product: syz [ 344.903729][ T8705] usb 2-1: Manufacturer: syz [ 344.908474][ T8705] usb 2-1: SerialNumber: syz 20:41:31 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@private1={0xfc, 0x1, [], 0x1}, 0x60, r6}) [ 345.300757][ T8705] usb 2-1: 0:2 : does not exist 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 345.353137][ T8705] usb 2-1: USB disconnect, device number 3 [ 345.429750][ T8706] Bluetooth: hci1: command 0x041b tx timeout 20:41:32 executing program 0: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 345.888973][ T8705] usb 2-1: new high-speed USB device number 4 using dummy_hcd 20:41:32 executing program 0: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 346.261205][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.271988][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.281277][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 346.493477][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.503223][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.512048][ T8705] usb 2-1: Product: syz [ 346.516377][ T8705] usb 2-1: Manufacturer: syz [ 346.521219][ T8705] usb 2-1: SerialNumber: syz 20:41:32 executing program 0: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 346.940708][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 346.957864][ T9144] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 20:41:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 347.089932][ T8705] usb 2-1: 0:2 : does not exist [ 347.162481][ T8705] usb 2-1: USB disconnect, device number 4 [ 347.509225][ T8705] Bluetooth: hci1: command 0x040f tx timeout 20:41:33 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@private1={0xfc, 0x1, [], 0x1}, 0x60, r6}) 20:41:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 20:41:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 348.320866][ T8706] usb 2-1: new high-speed USB device number 5 using dummy_hcd 20:41:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 348.711009][ T8706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.721438][ T8706] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.730796][ T8706] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 348.940808][ T8706] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.950277][ T8706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.958446][ T8706] usb 2-1: Product: syz [ 348.963138][ T8706] usb 2-1: Manufacturer: syz [ 348.967885][ T8706] usb 2-1: SerialNumber: syz 20:41:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 349.316639][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.345705][ T9197] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.469670][ T8706] usb 2-1: 0:2 : does not exist [ 349.536850][ T8706] usb 2-1: USB disconnect, device number 5 [ 349.593838][ T8705] Bluetooth: hci1: command 0x0419 tx timeout 20:41:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:36 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@private1={0xfc, 0x1, [], 0x1}, 0x60, r6}) 20:41:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 350.470235][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd 20:41:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 350.830649][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.842388][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.851667][ T27] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0) [ 351.050665][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.060152][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.068308][ T27] usb 2-1: Product: syz [ 351.072893][ T27] usb 2-1: Manufacturer: syz [ 351.077632][ T27] usb 2-1: SerialNumber: syz 20:41:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0) 20:41:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0) [ 351.395577][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.429633][ T9220] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.529942][ T27] usb 2-1: 0:2 : does not exist [ 351.592651][ T27] usb 2-1: USB disconnect, device number 6 20:41:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:38 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}}}, 0x24}}, 0x0) 20:41:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x20}}], 0x2, 0x0) [ 352.560308][ T8706] usb 2-1: new high-speed USB device number 7 using dummy_hcd 20:41:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x20}}], 0x2, 0x0) [ 352.940998][ T8706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.951526][ T8706] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.960793][ T8706] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x20}}], 0x2, 0x0) [ 353.151565][ T8706] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.160958][ T8706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.169398][ T8706] usb 2-1: Product: syz [ 353.173747][ T8706] usb 2-1: Manufacturer: syz [ 353.178497][ T8706] usb 2-1: SerialNumber: syz 20:41:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}], 0x2, 0x0) [ 353.517178][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.556387][ T9260] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.677007][ T8706] usb 2-1: 0:2 : does not exist [ 353.760435][ T8706] usb 2-1: USB disconnect, device number 7 20:41:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}], 0x2, 0x0) [ 354.008134][ T9292] IPVS: ftp: loaded support on port[0] = 21 20:41:40 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) 20:41:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}], 0x2, 0x0) [ 354.610038][ T9292] chnl_net:caif_netlink_parms(): no params data found 20:41:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b", @ANYRES32], 0x20}}], 0x2, 0x0) [ 354.799845][ T8705] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 354.868702][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.876194][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.887077][ T9292] device bridge_slave_0 entered promiscuous mode [ 354.911999][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.919631][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.936019][ T9292] device bridge_slave_1 entered promiscuous mode [ 355.000598][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.019917][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.098833][ T9292] team0: Port device team_slave_0 added [ 355.137534][ T9292] team0: Port device team_slave_1 added [ 355.192396][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.202806][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.212062][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b", @ANYRES32], 0x20}}], 0x2, 0x0) [ 355.253673][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.261244][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.288317][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.344115][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.351823][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.378038][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.462698][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.475342][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.488114][ T8705] usb 2-1: Product: syz [ 355.494619][ T8705] usb 2-1: Manufacturer: syz [ 355.501516][ T8705] usb 2-1: SerialNumber: syz [ 355.686944][ T9292] device hsr_slave_0 entered promiscuous mode [ 355.710154][ T9292] device hsr_slave_1 entered promiscuous mode [ 355.725809][ T9292] debugfs: Directory 'hsr0' with parent 'hsr' already present! 20:41:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b", @ANYRES32], 0x20}}], 0x2, 0x0) [ 355.734359][ T9292] Cannot create hsr debugfs directory [ 355.961446][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.025132][ T9491] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 20:41:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d817580200", @ANYRES32], 0x20}}], 0x2, 0x0) [ 356.163610][ T8705] usb 2-1: 0:2 : does not exist [ 356.254056][ T8705] usb 2-1: USB disconnect, device number 8 [ 356.291176][ T9292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.312979][ T9292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.362687][ T9292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.433823][ T9292] netdevsim netdevsim2 netdevsim3: renamed from eth3 20:41:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d817580200", @ANYRES32], 0x20}}], 0x2, 0x0) [ 357.116196][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.164241][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.173691][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.207859][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.246775][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.259936][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.269694][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.277201][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.363714][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.373278][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.383761][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.393992][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.401537][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.410737][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.422238][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.464066][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.475758][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.500332][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.537290][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.548449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.610758][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.620902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.655185][ T9292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.669123][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.696536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.707049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.860332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.868187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.952411][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.232033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.242454][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.420037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.430457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.505928][ T9292] device veth0_vlan entered promiscuous mode [ 358.529116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.538633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.595871][ T9292] device veth1_vlan entered promiscuous mode [ 358.782333][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.793191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.803158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.813541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.875992][ T9292] device veth0_macvtap entered promiscuous mode [ 358.922888][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.939203][ T9292] device veth1_macvtap entered promiscuous mode [ 359.133631][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.144915][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.155148][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.165749][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.180669][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.189326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.200152][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.303528][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 359.315089][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.325267][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 359.336054][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.351200][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.359959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.370753][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.285215][ T9552] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:41:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:47 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 20:41:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d817580200", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 361.981698][ T8705] usb 2-1: new high-speed USB device number 9 using dummy_hcd 20:41:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 362.403047][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.413943][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.423203][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:48 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 362.612374][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.622076][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.630608][ T8705] usb 2-1: Product: syz [ 362.634927][ T8705] usb 2-1: Manufacturer: syz [ 362.639825][ T8705] usb 2-1: SerialNumber: syz 20:41:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:48 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 362.994877][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.033454][ T8704] Bluetooth: hci2: command 0x0409 tx timeout [ 363.123279][ T8705] usb 2-1: 0:2 : does not exist 20:41:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d817580200000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 363.185434][ T8705] usb 2-1: USB disconnect, device number 9 20:41:49 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d817580200000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:49 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20:41:49 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d817580200000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 364.232399][ T8707] usb 2-1: new high-speed USB device number 10 using dummy_hcd 20:41:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x1, 0x0) 20:41:50 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x1, 0x0) [ 364.601072][ T8707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.612051][ T8707] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.621296][ T8707] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:41:50 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x1, 0x0) [ 364.841648][ T8707] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.851011][ T8707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.859188][ T8707] usb 2-1: Product: syz [ 364.863712][ T8707] usb 2-1: Manufacturer: syz [ 364.868469][ T8707] usb 2-1: SerialNumber: syz 20:41:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 365.110908][ T17] Bluetooth: hci2: command 0x041b tx timeout [ 365.280945][ T8707] usb 2-1: 0:2 : does not exist [ 365.342509][ T8707] usb 2-1: USB disconnect, device number 10 20:41:51 executing program 2: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:51 executing program 2: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:51 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:41:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:52 executing program 2: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) [ 366.361449][ T8704] usb 2-1: new high-speed USB device number 11 using dummy_hcd 20:41:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 20:41:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000", @ANYRES32], 0x20}}], 0x2, 0x0) 20:41:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 366.742789][ T8704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.753578][ T8704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.762885][ T8704] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 366.932664][ T8704] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.942170][ T8704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.951416][ T8704] usb 2-1: Product: syz [ 366.955814][ T8704] usb 2-1: Manufacturer: syz [ 366.960641][ T8704] usb 2-1: SerialNumber: syz 20:41:53 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) [ 367.191461][ T27] Bluetooth: hci2: command 0x040f tx timeout 20:41:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 367.391705][ T8704] usb 2-1: 0:2 : does not exist [ 367.445680][ T8704] usb 2-1: USB disconnect, device number 11 [ 367.721124][ T8705] usb 1-1: new high-speed USB device number 2 using dummy_hcd 20:41:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:54 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 20:41:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 368.103693][ T8705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.114090][ T8705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.123519][ T8705] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 368.315215][ T8705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.324994][ T8705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.333349][ T8705] usb 1-1: Product: syz [ 368.337610][ T8705] usb 1-1: Manufacturer: syz [ 368.342386][ T8705] usb 1-1: SerialNumber: syz [ 368.512330][ T8704] usb 2-1: new high-speed USB device number 12 using dummy_hcd 20:41:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 368.667822][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 368.764423][ T9713] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 368.882916][ T8705] usb 1-1: 0:2 : does not exist [ 368.921768][ T8704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.932169][ T8704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.941437][ T8704] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 368.983865][ T8705] usb 1-1: USB disconnect, device number 2 20:41:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 369.172860][ T8704] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.182288][ T8704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.190693][ T8704] usb 2-1: Product: syz [ 369.195016][ T8704] usb 2-1: Manufacturer: syz [ 369.199770][ T8704] usb 2-1: SerialNumber: syz [ 369.270293][ T8707] Bluetooth: hci2: command 0x0419 tx timeout [ 369.556604][ T8704] usb 2-1: 0:2 : does not exist 20:41:55 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) 20:41:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 369.623832][ T8704] usb 2-1: USB disconnect, device number 12 20:41:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) 20:41:56 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 370.163520][ T8705] usb 1-1: new high-speed USB device number 3 using dummy_hcd 20:41:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 370.554803][ T8705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.565204][ T8705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.574575][ T8705] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 370.690604][ T3205] usb 2-1: new high-speed USB device number 13 using dummy_hcd 20:41:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 370.763495][ T8705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.772771][ T8705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.781134][ T8705] usb 1-1: Product: syz [ 370.785396][ T8705] usb 1-1: Manufacturer: syz [ 370.790204][ T8705] usb 1-1: SerialNumber: syz 20:41:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b22f8d81758020000000000000000"], 0x20}}], 0x2, 0x0) [ 371.074099][ T3205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.084505][ T3205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.093896][ T3205] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 371.167960][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.241021][ T9774] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.344749][ T3205] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.354066][ T3205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.362378][ T3205] usb 2-1: Product: syz [ 371.366697][ T3205] usb 2-1: Manufacturer: syz [ 371.371524][ T3205] usb 2-1: SerialNumber: syz [ 371.421286][ T8705] usb 1-1: 0:2 : does not exist 20:41:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0) [ 371.473883][ T8705] usb 1-1: USB disconnect, device number 3 [ 371.841157][ T3205] usb 2-1: 0:2 : does not exist 20:41:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0) [ 371.909026][ T3205] usb 2-1: USB disconnect, device number 13 20:41:58 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) 20:41:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x0) 20:41:58 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 372.420950][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd 20:41:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x20}}], 0x2, 0x0) [ 372.782883][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.793368][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.802650][ T27] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 372.940720][ T3205] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 373.022134][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.031630][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.039726][ T27] usb 1-1: Product: syz [ 373.044335][ T27] usb 1-1: Manufacturer: syz [ 373.049049][ T27] usb 1-1: SerialNumber: syz 20:41:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x20}}], 0x2, 0x0) [ 373.331423][ T3205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.341970][ T3205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.351860][ T3205] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 373.459740][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.526167][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.563551][ T3205] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.572999][ T3205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.581359][ T3205] usb 2-1: Product: syz [ 373.585718][ T3205] usb 2-1: Manufacturer: syz [ 373.590588][ T3205] usb 2-1: SerialNumber: syz 20:41:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x20}}], 0x2, 0x0) [ 373.631974][ T27] usb 1-1: 0:2 : does not exist [ 373.723361][ T27] usb 1-1: USB disconnect, device number 4 20:42:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x20}}], 0x2, 0x0) [ 374.002168][ T3205] usb 2-1: 0:2 : does not exist [ 374.071569][ T3205] usb 2-1: USB disconnect, device number 14 20:42:00 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 20:42:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x20}}], 0x2, 0x0) 20:42:00 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 20:42:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x20}}], 0x2, 0x0) 20:42:01 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 374.881816][ T17] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 374.990509][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd 20:42:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff3b"], 0x20}}], 0x2, 0x0) [ 375.242117][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.252719][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.261995][ T17] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 375.372582][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.383364][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.392661][ T27] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 375.482293][ T17] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.491802][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.499899][ T17] usb 1-1: Product: syz [ 375.504445][ T17] usb 1-1: Manufacturer: syz [ 375.509154][ T17] usb 1-1: SerialNumber: syz 20:42:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x20}}], 0x2, 0x0) [ 375.612853][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.622713][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.631118][ T27] usb 2-1: Product: syz [ 375.635446][ T27] usb 2-1: Manufacturer: syz [ 375.640208][ T27] usb 2-1: SerialNumber: syz [ 375.857523][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:42:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x20}}], 0x2, 0x0) [ 376.033087][ T9888] IPVS: ftp: loaded support on port[0] = 21 [ 376.091087][ T17] usb 1-1: 0:2 : does not exist [ 376.174049][ T17] usb 1-1: USB disconnect, device number 5 [ 376.241586][ T27] usb 2-1: 0:2 : does not exist [ 376.332305][ T27] usb 2-1: USB disconnect, device number 15 20:42:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x20}}], 0x2, 0x0) 20:42:02 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) 20:42:02 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 377.101860][ T9888] chnl_net:caif_netlink_parms(): no params data found 20:42:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00'], 0x20}}], 0x2, 0x0) [ 377.462243][ T8705] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 377.513303][ T3205] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 377.650172][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.657880][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.668004][ T9888] device bridge_slave_0 entered promiscuous mode [ 377.686710][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.695209][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.705404][ T9888] device bridge_slave_1 entered promiscuous mode [ 377.779914][ T9888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.895504][ T9888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.906330][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.917157][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.926309][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 377.973620][ T3205] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.984074][ T3205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.993678][ T3205] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00'], 0x20}}], 0x2, 0x0) [ 378.183792][ T9888] team0: Port device team_slave_0 added [ 378.219889][ T9888] team0: Port device team_slave_1 added [ 378.252421][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.261924][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.270078][ T8705] usb 2-1: Product: syz [ 378.274988][ T8705] usb 2-1: Manufacturer: syz [ 378.279741][ T8705] usb 2-1: SerialNumber: syz [ 378.286731][ T3205] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.296038][ T3205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.304224][ T3205] usb 1-1: Product: syz [ 378.308491][ T3205] usb 1-1: Manufacturer: syz [ 378.313271][ T3205] usb 1-1: SerialNumber: syz [ 378.527460][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.534748][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.561404][ T9888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.884981][ T3205] usb 1-1: 0:2 : does not exist [ 378.991559][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.998645][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.024476][ T3205] usb 1-1: USB disconnect, device number 6 [ 379.024839][ T9888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.093085][ T8705] usb 2-1: 0:2 : does not exist 20:42:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00'], 0x20}}], 0x2, 0x0) [ 379.255992][ T8705] usb 2-1: USB disconnect, device number 16 20:42:05 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20:42:05 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) [ 379.823015][ T9888] device hsr_slave_0 entered promiscuous mode [ 379.944767][ T9888] device hsr_slave_1 entered promiscuous mode [ 380.022927][ T9888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.030730][ T9888] Cannot create hsr debugfs directory [ 380.451172][ T8705] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 380.583567][ T8704] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 380.855927][ T8705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.866342][ T8705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.875723][ T8705] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 381.014727][ T8704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.025408][ T8704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.034703][ T8704] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 381.051605][ T8705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.061077][ T8705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.069165][ T8705] usb 1-1: Product: syz [ 381.073573][ T8705] usb 1-1: Manufacturer: syz [ 381.078256][ T8705] usb 1-1: SerialNumber: syz [ 381.414295][ T8704] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.424236][ T8704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.432604][ T8704] usb 2-1: Product: syz [ 381.436932][ T8704] usb 2-1: Manufacturer: syz [ 381.441789][ T8704] usb 2-1: SerialNumber: syz [ 381.545926][ T9888] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.614487][ T8705] usb 1-1: 0:2 : does not exist [ 381.677428][ T8705] usb 1-1: USB disconnect, device number 7 [ 381.697244][ T9888] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.803545][ T9888] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.892901][ T9888] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.021466][ T8704] usb 2-1: 0:2 : does not exist [ 382.104417][ T8704] usb 2-1: USB disconnect, device number 17 [ 382.897369][ T9888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.028885][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.039861][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.085475][ T9888] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.123504][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.133776][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.143392][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.150935][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.199153][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.208962][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.219432][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.230914][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.238238][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.247544][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.289002][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.374722][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.386050][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.482649][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.493408][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.504475][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.592243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.602597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.669023][ T9888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.683722][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.702751][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.713143][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.856498][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.864558][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.917445][ T9888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.176433][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.187463][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.334588][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.344977][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.390328][ T9888] device veth0_vlan entered promiscuous mode [ 384.400333][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.410303][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.488007][ T9888] device veth1_vlan entered promiscuous mode [ 384.774087][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 384.784434][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 384.794538][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.805290][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.875206][ T9888] device veth0_macvtap entered promiscuous mode [ 384.908550][ T9888] device veth1_macvtap entered promiscuous mode [ 385.048623][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.059024][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 385.120502][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.131194][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.141253][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.155836][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.165817][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.176421][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.192235][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.227598][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.238901][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.437308][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.448463][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.458525][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.469337][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.479473][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.490189][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.509954][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.526214][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.537598][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.741849][ T8707] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 388.102089][ T8707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.112510][ T8707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.121725][ T8707] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 388.295204][ T8707] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.304525][ T8707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.312873][ T8707] usb 4-1: Product: syz [ 388.317214][ T8707] usb 4-1: Manufacturer: syz [ 388.322151][ T8707] usb 4-1: SerialNumber: syz [ 388.674186][ T8707] usb 4-1: 0:2 : does not exist [ 388.718369][ T8707] usb 4-1: USB disconnect, device number 2 [ 389.033274][ T8707] Bluetooth: hci3: command 0x0409 tx timeout 20:42:15 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20:42:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00'], 0x20}}], 0x2, 0x0) 20:42:15 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:42:15 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) 20:42:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00'], 0x20}}], 0x2, 0x0) [ 389.592603][ T3489] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 389.621962][ T8705] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 389.892642][ T17] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 389.952858][ T3489] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.963374][ T3489] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.972629][ T3489] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00'], 0x20}}], 0x2, 0x0) [ 390.025774][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.036637][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.045870][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 390.153957][ T3489] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.163625][ T3489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.171876][ T3489] usb 1-1: Product: syz [ 390.176145][ T3489] usb 1-1: Manufacturer: syz [ 390.180836][ T3489] usb 1-1: SerialNumber: syz [ 390.222229][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.232171][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.240301][ T8705] usb 2-1: Product: syz [ 390.244736][ T8705] usb 2-1: Manufacturer: syz [ 390.249466][ T8705] usb 2-1: SerialNumber: syz [ 390.265774][ T17] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.276963][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.286149][ T17] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 390.533897][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.543600][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.552484][ T17] usb 4-1: Product: syz [ 390.556803][ T17] usb 4-1: Manufacturer: syz [ 390.561635][ T17] usb 4-1: SerialNumber: syz [ 390.614354][ T3489] usb 1-1: 0:2 : does not exist 20:42:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) [ 390.680375][ T3489] usb 1-1: USB disconnect, device number 8 [ 390.731980][ T8705] usb 2-1: 0:2 : does not exist [ 390.838863][ T8705] usb 2-1: USB disconnect, device number 18 [ 391.031744][ T17] usb 4-1: 0:2 : does not exist [ 391.099477][ T17] usb 4-1: USB disconnect, device number 3 [ 391.113445][ T9541] Bluetooth: hci3: command 0x041b tx timeout 20:42:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x20}}], 0x2, 0x0) 20:42:17 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 20:42:17 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 20:42:17 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20:42:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x20}}], 0x2, 0x0) [ 391.792080][ T17] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 391.971407][ T3489] usb 2-1: new high-speed USB device number 19 using dummy_hcd 20:42:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x20}}], 0x2, 0x0) [ 392.174260][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.184888][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.194135][ T17] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 392.274059][ T8707] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 392.352651][ T3489] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.363309][ T3489] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.372528][ T3489] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 392.444775][ T17] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.454087][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.462590][ T17] usb 1-1: Product: syz [ 392.466841][ T17] usb 1-1: Manufacturer: syz [ 392.475008][ T17] usb 1-1: SerialNumber: syz [ 392.610768][ T3489] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.620370][ T3489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.628842][ T3489] usb 2-1: Product: syz [ 392.633233][ T3489] usb 2-1: Manufacturer: syz [ 392.638002][ T3489] usb 2-1: SerialNumber: syz [ 392.682693][ T8707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.693302][ T8707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.702508][ T8707] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 392.863012][ T17] usb 1-1: 0:2 : does not exist [ 392.882773][ T8707] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.892162][ T8707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.900296][ T8707] usb 4-1: Product: syz [ 392.904799][ T8707] usb 4-1: Manufacturer: syz [ 392.909524][ T8707] usb 4-1: SerialNumber: syz [ 392.977777][ T17] usb 1-1: USB disconnect, device number 9 [ 393.052187][ T3489] usb 2-1: 0:2 : does not exist [ 393.147939][ T3489] usb 2-1: USB disconnect, device number 19 [ 393.191532][ T3205] Bluetooth: hci3: command 0x040f tx timeout [ 393.443610][ T8707] usb 4-1: 0:2 : does not exist 20:42:19 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 393.524455][ T8707] usb 4-1: USB disconnect, device number 4 20:42:19 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20:42:20 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 20:42:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x1, 0x0) [ 394.543600][ T9541] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 394.572666][ T3205] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 394.651316][ T8705] usb 2-1: new high-speed USB device number 20 using dummy_hcd 20:42:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x1, 0x0) [ 394.915483][ T9541] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.926105][ T9541] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.935651][ T9541] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 394.949196][ T3205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.959683][ T3205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.969162][ T3205] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x1, 0x0) [ 395.054363][ T8705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.064841][ T8705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.074164][ T8705] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 395.248248][ T9541] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.257574][ T9541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.266063][ T9541] usb 1-1: Product: syz [ 395.270330][ T9541] usb 1-1: Manufacturer: syz [ 395.278117][ T9541] usb 1-1: SerialNumber: syz [ 395.284984][ T3205] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.294273][ T3205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.302482][ T3205] usb 4-1: Product: syz [ 395.306798][ T3205] usb 4-1: Manufacturer: syz [ 395.311621][ T3205] usb 4-1: SerialNumber: syz [ 395.331291][ T8704] Bluetooth: hci3: command 0x0419 tx timeout [ 395.362340][ T8705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.371640][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.379784][ T8705] usb 2-1: Product: syz [ 395.384179][ T8705] usb 2-1: Manufacturer: syz [ 395.388929][ T8705] usb 2-1: SerialNumber: syz 20:42:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x20}}], 0x2, 0x0) 20:42:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) [ 395.812731][ T3205] usb 4-1: 0:2 : does not exist [ 395.890291][ T3205] usb 4-1: USB disconnect, device number 5 [ 395.932960][ T8705] usb 2-1: 0:2 : does not exist [ 396.008896][ T8705] usb 2-1: USB disconnect, device number 20 [ 396.053921][ T9541] usb 1-1: 0:2 : does not exist [ 396.165803][ T9541] usb 1-1: USB disconnect, device number 10 20:42:22 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:42:22 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20:42:22 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 20:42:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) [ 397.141805][ T3489] usb 1-1: new high-speed USB device number 11 using dummy_hcd 20:42:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) [ 397.262513][ T8707] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 397.322011][ T9541] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 397.453251][T10472] IPVS: ftp: loaded support on port[0] = 21 [ 397.523934][ T3489] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.534491][ T3489] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.543906][ T3489] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 397.633563][ T8707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.644193][ T8707] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.654581][ T8707] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 397.784262][ T9541] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.794674][ T9541] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.803690][ T3489] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.803763][ T3489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.803838][ T3489] usb 1-1: Product: syz [ 397.813082][ T9541] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 397.836707][ T3489] usb 1-1: Manufacturer: syz [ 397.841496][ T3489] usb 1-1: SerialNumber: syz [ 397.883865][ T8707] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.893280][ T8707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.901751][ T8707] usb 2-1: Product: syz [ 397.906065][ T8707] usb 2-1: Manufacturer: syz [ 397.910827][ T8707] usb 2-1: SerialNumber: syz 20:42:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) [ 398.063943][ T9541] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.073419][ T9541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.081865][ T9541] usb 4-1: Product: syz [ 398.086198][ T9541] usb 4-1: Manufacturer: syz [ 398.090958][ T9541] usb 4-1: SerialNumber: syz [ 398.292771][ T8707] usb 2-1: 0:2 : does not exist [ 398.397160][ T8707] usb 2-1: USB disconnect, device number 21 [ 398.462735][ T3489] usb 1-1: 0:2 : does not exist [ 398.538483][ T3489] usb 1-1: USB disconnect, device number 11 [ 398.613395][ T9541] usb 4-1: 0:2 : does not exist [ 398.698850][ T9541] usb 4-1: USB disconnect, device number 6 [ 398.737997][T10472] chnl_net:caif_netlink_parms(): no params data found 20:42:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) 20:42:25 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20:42:25 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:42:25 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) [ 399.426721][T10472] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.434263][T10472] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.516504][T10472] device bridge_slave_0 entered promiscuous mode [ 399.603414][T10472] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.610812][T10472] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.621019][T10472] device bridge_slave_1 entered promiscuous mode [ 399.673606][ T8707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 399.762502][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 399.846658][T10472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.917578][T10472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.964552][T10222] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 400.053957][ T8707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.064433][ T8707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.073774][ T8707] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 400.152330][T10472] team0: Port device team_slave_0 added [ 400.167238][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.177828][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.181211][T10472] team0: Port device team_slave_1 added [ 400.187122][ T27] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 400.295039][ T8707] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.304290][ T8707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.312536][ T8707] usb 1-1: Product: syz [ 400.316790][ T8707] usb 1-1: Manufacturer: syz [ 400.321644][ T8707] usb 1-1: SerialNumber: syz [ 400.363034][T10472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.370822][T10472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.384123][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.398476][T10472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.418565][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.426918][ T27] usb 2-1: Product: syz [ 400.431239][ T27] usb 2-1: Manufacturer: syz [ 400.436120][ T27] usb 2-1: SerialNumber: syz [ 400.444425][T10222] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.455233][T10222] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.464555][T10222] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 400.592567][T10472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.599685][T10472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.625908][T10472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.663031][T10222] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.672847][T10222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.681039][T10222] usb 4-1: Product: syz [ 400.685582][T10222] usb 4-1: Manufacturer: syz [ 400.690411][T10222] usb 4-1: SerialNumber: syz [ 400.853201][ T8707] usb 1-1: 0:2 : does not exist [ 400.871587][T10472] device hsr_slave_0 entered promiscuous mode [ 400.886858][T10472] device hsr_slave_1 entered promiscuous mode [ 400.909210][T10472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.917128][T10472] Cannot create hsr debugfs directory [ 400.949525][ T8707] usb 1-1: USB disconnect, device number 12 [ 401.012545][ T27] usb 2-1: 0:2 : does not exist [ 401.100881][ T27] usb 2-1: USB disconnect, device number 22 [ 401.132184][T10222] usb 4-1: 0:2 : does not exist [ 401.258373][T10222] usb 4-1: USB disconnect, device number 7 [ 401.766739][T10472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.838716][T10472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.910214][T10472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 401.956798][T10472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.521220][T10472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.581285][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.591054][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.638846][T10472] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.735246][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.745919][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.755626][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.762958][ T9541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.957323][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.966812][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.977039][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.987014][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.994431][ T9541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.003652][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.014893][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.326261][T10472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.337330][T10472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.439960][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.451729][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.462321][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.473249][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.483738][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.493658][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.504280][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.514275][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.963600][T10472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.032602][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.042948][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 404.052975][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.061109][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.324913][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.336483][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.795570][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.805736][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.860064][T10472] device veth0_vlan entered promiscuous mode [ 405.871394][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.881360][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.081094][T10472] device veth1_vlan entered promiscuous mode [ 406.334900][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.345167][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.611367][T10222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.622657][T10222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.763354][T10472] device veth0_macvtap entered promiscuous mode [ 406.868928][T10472] device veth1_macvtap entered promiscuous mode [ 407.096125][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 407.107073][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.117365][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 407.127955][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.137996][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 407.148582][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.158637][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 407.169222][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.184525][T10472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.199402][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.209999][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.220227][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.230999][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.280069][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 407.293994][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.304064][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 407.314623][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.324641][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 407.335211][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.345247][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 407.355885][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.370930][T10472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.386416][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.397923][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.603764][T10819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:42:35 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) 20:42:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x2, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000002900000032000000ff"], 0x20}}], 0x2, 0x0) 20:42:35 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 20:42:35 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:42:35 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) [ 410.363427][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 410.371419][ T8707] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 410.393698][T10222] usb 2-1: new high-speed USB device number 23 using dummy_hcd 20:42:36 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 410.753322][T10222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.764765][T10222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.774617][T10222] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 410.784618][ T8707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.795554][ T8707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.805313][ T8707] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 410.818553][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.832545][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.843088][ T27] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 410.934792][ T9541] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 411.043241][T10222] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.053094][T10222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.061374][T10222] usb 2-1: Product: syz [ 411.066224][T10222] usb 2-1: Manufacturer: syz [ 411.070970][T10222] usb 2-1: SerialNumber: syz [ 411.077993][ T8707] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.087478][ T8707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.096326][ T8707] usb 4-1: Product: syz [ 411.100656][ T8707] usb 4-1: Manufacturer: syz [ 411.105533][ T8707] usb 4-1: SerialNumber: syz [ 411.111788][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.120959][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.129230][ T27] usb 1-1: Product: syz [ 411.133662][ T27] usb 1-1: Manufacturer: syz [ 411.138355][ T27] usb 1-1: SerialNumber: syz [ 411.198018][ T3489] Bluetooth: hci4: command 0x0409 tx timeout [ 411.332873][ T9541] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.343509][ T9541] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.352680][ T17] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 411.360627][ T9541] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 411.522632][ T8707] usb 4-1: 0:2 : does not exist [ 411.660608][ T8707] usb 4-1: USB disconnect, device number 8 [ 411.670982][T10222] usb 2-1: 0:2 : does not exist [ 411.685291][ T9541] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.695344][ T9541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.705581][ T9541] usb 5-1: Product: syz [ 411.710281][ T9541] usb 5-1: Manufacturer: syz [ 411.713867][ T17] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.717188][ T9541] usb 5-1: SerialNumber: syz [ 411.728872][ T17] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.757108][ T17] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 411.815774][T10222] usb 2-1: USB disconnect, device number 23 [ 411.852571][ T27] usb 1-1: 0:2 : does not exist [ 412.103947][ T27] usb 1-1: USB disconnect, device number 13 20:42:38 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) 20:42:38 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) 20:42:38 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) [ 412.463743][ T17] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.487691][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.496097][ T17] usb 3-1: Product: syz [ 412.501406][ T17] usb 3-1: Manufacturer: syz [ 412.507125][ T17] usb 3-1: SerialNumber: syz [ 412.602817][ T9541] usb 5-1: 0:2 : does not exist [ 412.757529][ T9541] usb 5-1: USB disconnect, device number 2 [ 413.278183][ T8707] Bluetooth: hci4: command 0x041b tx timeout [ 413.332762][ T17] usb 3-1: 0:2 : does not exist 20:42:39 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 413.364802][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 413.435368][ T17] usb 3-1: USB disconnect, device number 2 [ 413.482254][T10222] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 413.482695][ T9541] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 413.753729][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.764747][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.774049][ T27] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 413.903289][T10222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.914234][T10222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.923427][T10222] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 413.999511][ T9541] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.010053][ T9541] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.014421][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.019390][ T9541] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 414.028221][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.045751][ T27] usb 1-1: Product: syz 20:42:40 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) [ 414.050019][ T27] usb 1-1: Manufacturer: syz [ 414.055060][ T27] usb 1-1: SerialNumber: syz [ 414.186660][ T8705] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 414.240470][ T9541] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.251227][ T9541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.252571][T10222] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.267697][ T9541] usb 4-1: Product: syz [ 414.276946][T10222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.281127][ T9541] usb 4-1: Manufacturer: syz [ 414.289695][T10222] usb 2-1: Product: syz [ 414.294206][ T9541] usb 4-1: SerialNumber: syz [ 414.303922][T10222] usb 2-1: Manufacturer: syz [ 414.308820][T10222] usb 2-1: SerialNumber: syz [ 414.603131][ T27] usb 1-1: 0:2 : does not exist [ 414.623838][ T8705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.634966][ T8705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.647229][ T8705] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 414.666471][ T27] usb 1-1: USB disconnect, device number 14 [ 414.824538][ T9541] usb 4-1: 0:2 : does not exist [ 414.880842][ T9541] usb 4-1: USB disconnect, device number 9 [ 414.926380][ T8705] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.932740][T10222] usb 2-1: 0:2 : does not exist [ 414.937905][ T8705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.938021][ T8705] usb 5-1: Product: syz [ 415.012834][ T8705] usb 5-1: Manufacturer: syz [ 415.017579][ T8705] usb 5-1: SerialNumber: syz [ 415.023092][ T3205] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 415.122492][T10222] usb 2-1: USB disconnect, device number 24 20:42:41 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) [ 415.353436][ T17] Bluetooth: hci4: command 0x040f tx timeout [ 415.433265][ T3205] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.444077][ T3205] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.453573][ T3205] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:41 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) 20:42:41 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) [ 415.783574][ T3205] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.793019][ T3205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.801201][ T3205] usb 3-1: Product: syz [ 415.805704][ T3205] usb 3-1: Manufacturer: syz [ 415.816116][ T3205] usb 3-1: SerialNumber: syz [ 415.904054][ T8705] usb 5-1: 0:2 : does not exist [ 415.970624][ T8705] usb 5-1: USB disconnect, device number 3 [ 416.132531][ T12] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 416.415032][ T3205] usb 3-1: 0:2 : does not exist [ 416.487217][ T3205] usb 3-1: USB disconnect, device number 3 [ 416.515660][ T12] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.526087][ T12] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.535308][ T12] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 416.612153][T10988] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 416.613769][ T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd 20:42:42 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 416.854489][ T12] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.863847][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.875309][ T12] usb 1-1: Product: syz [ 416.879616][ T12] usb 1-1: Manufacturer: syz [ 416.884471][ T12] usb 1-1: SerialNumber: syz [ 417.012928][T10988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.023092][ T17] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.023220][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.023347][ T17] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 417.055905][T10988] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.065022][T10988] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:43 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) [ 417.183696][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.193406][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.201569][ T17] usb 4-1: Product: syz [ 417.206121][ T17] usb 4-1: Manufacturer: syz [ 417.210880][ T17] usb 4-1: SerialNumber: syz [ 417.252274][ T3205] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 417.266256][T10988] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.276061][T10988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.284417][T10988] usb 2-1: Product: syz [ 417.288734][T10988] usb 2-1: Manufacturer: syz [ 417.293596][T10988] usb 2-1: SerialNumber: syz [ 417.385345][ T12] usb 1-1: 0:2 : does not exist [ 417.432334][ T27] Bluetooth: hci4: command 0x0419 tx timeout [ 417.440769][ T12] usb 1-1: USB disconnect, device number 15 [ 417.646875][ T3205] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.657261][ T3205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.663365][ T17] usb 4-1: 0:2 : does not exist [ 417.666503][ T3205] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 417.726436][ T17] usb 4-1: USB disconnect, device number 10 [ 417.803179][T10988] usb 2-1: 0:2 : does not exist [ 417.872216][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 417.877165][T10988] usb 2-1: USB disconnect, device number 25 [ 417.968525][ T3205] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.977862][ T3205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.986149][ T3205] usb 5-1: Product: syz [ 417.990480][ T3205] usb 5-1: Manufacturer: syz [ 417.995329][ T3205] usb 5-1: SerialNumber: syz 20:42:44 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) [ 418.244073][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.254701][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.264326][ T27] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:44 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 418.403435][ T3205] usb 5-1: 0:2 : does not exist 20:42:44 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) [ 418.496863][ T3205] usb 5-1: USB disconnect, device number 4 [ 418.564820][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.574238][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.582581][ T27] usb 3-1: Product: syz [ 418.586884][ T27] usb 3-1: Manufacturer: syz [ 418.591613][ T27] usb 3-1: SerialNumber: syz [ 418.942601][T10988] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 419.063299][ T27] usb 3-1: 0:2 : does not exist [ 419.073210][ T17] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 419.133942][ T27] usb 3-1: USB disconnect, device number 4 [ 419.235479][ T8707] usb 2-1: new high-speed USB device number 26 using dummy_hcd 20:42:45 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 419.325586][T10988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.335961][T10988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.345182][T10988] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 419.435698][ T17] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.446621][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.455858][ T17] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 419.554581][T10988] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.563968][T10988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.572310][T10988] usb 1-1: Product: syz [ 419.576579][T10988] usb 1-1: Manufacturer: syz [ 419.581804][T10988] usb 1-1: SerialNumber: syz [ 419.635366][ T8707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.645995][ T8707] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.655528][ T8707] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 419.704031][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.713488][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.721775][ T17] usb 4-1: Product: syz [ 419.726387][ T17] usb 4-1: Manufacturer: syz [ 419.731147][ T17] usb 4-1: SerialNumber: syz 20:42:45 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) [ 419.914233][ T8707] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.923874][ T8707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.932363][ T8707] usb 2-1: Product: syz [ 419.936702][ T8707] usb 2-1: Manufacturer: syz [ 419.941469][ T8707] usb 2-1: SerialNumber: syz [ 420.063213][T10988] usb 1-1: 0:2 : does not exist [ 420.071668][ T3205] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 420.162965][T10988] usb 1-1: USB disconnect, device number 16 [ 420.216184][ T17] usb 4-1: 0:2 : does not exist [ 420.282099][ C1] raw-gadget gadget: ignoring, device is not running [ 420.317607][ T17] usb 4-1: USB disconnect, device number 11 [ 420.363178][ T8707] usb 2-1: 0:2 : does not exist [ 420.425808][ T8707] usb 2-1: USB disconnect, device number 26 [ 420.464952][ T3205] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.477512][ T3205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.486826][ T3205] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 420.563065][ T8705] usb 3-1: new high-speed USB device number 5 using dummy_hcd 20:42:46 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) 20:42:46 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 420.734179][ T3205] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.743802][ T3205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.752369][ T3205] usb 5-1: Product: syz [ 420.756776][ T3205] usb 5-1: Manufacturer: syz [ 420.761546][ T3205] usb 5-1: SerialNumber: syz 20:42:47 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 420.974166][ T8705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.984718][ T8705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.994665][ T8705] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 421.234038][ T8705] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.243474][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.251625][ T8705] usb 3-1: Product: syz [ 421.256348][ T8705] usb 3-1: Manufacturer: syz [ 421.261153][ T8705] usb 3-1: SerialNumber: syz [ 421.316736][ T3205] usb 5-1: 0:2 : does not exist [ 421.388914][ T3205] usb 5-1: USB disconnect, device number 5 [ 421.556867][T10988] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 421.574843][ T8707] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 421.662926][ T8704] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 421.756830][ T8705] usb 3-1: 0:2 : does not exist [ 421.828783][ T8705] usb 3-1: USB disconnect, device number 5 [ 421.945770][T10988] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.953907][ T8707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.956276][T10988] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.966752][ T8707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.975980][T10988] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:48 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) [ 421.985867][ T8707] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 422.079127][ T8704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.089731][ T8704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.099210][ T8704] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 422.305750][ T8704] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.315413][ T8704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.323968][ T8704] usb 2-1: Product: syz [ 422.328282][ T8704] usb 2-1: Manufacturer: syz [ 422.333133][ T8704] usb 2-1: SerialNumber: syz [ 422.339956][T10988] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.349618][T10988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.358096][T10988] usb 4-1: Product: syz [ 422.362614][T10988] usb 4-1: Manufacturer: syz [ 422.367360][T10988] usb 4-1: SerialNumber: syz [ 422.373464][ T8707] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.383269][ T8707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.391329][ T8707] usb 1-1: Product: syz [ 422.395821][ T8707] usb 1-1: Manufacturer: syz [ 422.400522][ T8707] usb 1-1: SerialNumber: syz 20:42:48 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) dup(0xffffffffffffffff) [ 422.571707][ T8705] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 422.812121][ C1] hrtimer: interrupt took 279349 ns [ 422.856473][ T8704] usb 2-1: 0:2 : does not exist [ 422.950245][ T8704] usb 2-1: USB disconnect, device number 27 [ 422.964330][ T8705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.975888][ T8705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.985775][ T8705] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 423.013559][T10988] usb 4-1: 0:2 : does not exist [ 423.043569][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 423.079684][T10988] usb 4-1: USB disconnect, device number 12 [ 423.143163][ T8707] usb 1-1: 0:2 : does not exist [ 423.224046][ T8705] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.227503][ T8707] usb 1-1: USB disconnect, device number 17 [ 423.233828][ T8705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.234053][ T8705] usb 5-1: Product: syz [ 423.253431][ T8705] usb 5-1: Manufacturer: syz [ 423.258515][ T8705] usb 5-1: SerialNumber: syz 20:42:49 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20:42:49 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) [ 423.418217][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.429210][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.439405][ T27] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:49 executing program 1: [ 423.744185][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.755459][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.765404][ T27] usb 3-1: Product: syz [ 423.770337][ T27] usb 3-1: Manufacturer: syz [ 423.775259][ T27] usb 3-1: SerialNumber: syz [ 423.833542][ T8705] usb 5-1: 0:2 : does not exist [ 423.963900][ T8705] usb 5-1: USB disconnect, device number 6 20:42:50 executing program 1: [ 424.123976][ T8707] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 424.164528][ T27] usb 3-1: 0:2 : does not exist [ 424.203457][ T17] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 424.254699][ T27] usb 3-1: USB disconnect, device number 6 20:42:50 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) [ 424.494075][ T8707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.504721][ T8707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.513956][ T8707] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 424.603822][ T17] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.614509][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.623835][ T17] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:50 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfff1}}}, 0x24}}, 0x0) [ 424.774101][ T8707] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.784085][ T8707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.792739][ T8707] usb 1-1: Product: syz [ 424.797456][ T8707] usb 1-1: Manufacturer: syz [ 424.802764][ T8707] usb 1-1: SerialNumber: syz 20:42:50 executing program 1: [ 424.823666][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.834206][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.843111][ T17] usb 4-1: Product: syz [ 424.848860][ T17] usb 4-1: Manufacturer: syz [ 424.854469][ T17] usb 4-1: SerialNumber: syz [ 425.263354][ T17] usb 4-1: 0:2 : does not exist 20:42:51 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 425.330749][ T17] usb 4-1: USB disconnect, device number 13 [ 425.373156][ T8707] usb 1-1: 0:2 : does not exist [ 425.381060][T10222] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 425.405712][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 425.486240][ T8707] usb 1-1: USB disconnect, device number 18 [ 425.743038][T10222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.753740][T10222] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.763781][T10222] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 425.813712][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.824703][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.834763][ T27] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:52 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:42:52 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 426.035485][T10222] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.044937][T10222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.053339][T10222] usb 3-1: Product: syz [ 426.057655][T10222] usb 3-1: Manufacturer: syz [ 426.062539][T10222] usb 3-1: SerialNumber: syz [ 426.068338][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.077893][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.086208][ T27] usb 5-1: Product: syz [ 426.090525][ T27] usb 5-1: Manufacturer: syz [ 426.095422][ T27] usb 5-1: SerialNumber: syz 20:42:52 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 20:42:52 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 426.474914][T10222] usb 3-1: 0:2 : does not exist [ 426.552940][T10222] usb 3-1: USB disconnect, device number 7 [ 426.603426][ T27] usb 5-1: 0:2 : does not exist [ 426.663104][ T8705] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 426.693505][T10842] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 426.755768][ T27] usb 5-1: USB disconnect, device number 7 20:42:53 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) [ 427.053602][T10842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.056782][ T8705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.064182][T10842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.074242][ T8705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.074385][ T8705] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:42:53 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 427.101713][T10842] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 427.290279][ T8705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.299591][ T8705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.308076][ T8705] usb 1-1: Product: syz [ 427.312463][ T8705] usb 1-1: Manufacturer: syz [ 427.317272][ T8705] usb 1-1: SerialNumber: syz [ 427.344265][T10842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.353943][T10842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.362104][T10842] usb 4-1: Product: syz [ 427.366781][T10842] usb 4-1: Manufacturer: syz [ 427.371669][T10842] usb 4-1: SerialNumber: syz [ 427.552640][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd 20:42:53 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 427.704211][T10222] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 427.744594][T10842] usb 4-1: 0:2 : does not exist [ 427.789909][T10842] usb 4-1: USB disconnect, device number 14 [ 427.874873][ T8705] usb 1-1: 0:2 : does not exist [ 427.919053][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.929520][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.939085][ T27] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 427.960804][ T8705] usb 1-1: USB disconnect, device number 19 [ 428.074813][T10222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.086728][T10222] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.096049][T10222] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 428.143307][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.153149][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.161307][ T27] usb 3-1: Product: syz [ 428.165974][ T27] usb 3-1: Manufacturer: syz [ 428.170349][T11432] IPVS: ftp: loaded support on port[0] = 21 [ 428.170732][ T27] usb 3-1: SerialNumber: syz [ 428.304149][T10222] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.316005][T10222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.324369][T10222] usb 5-1: Product: syz [ 428.328709][T10222] usb 5-1: Manufacturer: syz [ 428.333624][T10222] usb 5-1: SerialNumber: syz 20:42:54 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:42:54 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 428.523487][ T27] usb 3-1: 0:2 : does not exist [ 428.597470][ T27] usb 3-1: USB disconnect, device number 8 20:42:54 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 428.736665][T10222] usb 5-1: 0:2 : does not exist [ 428.818062][T10222] usb 5-1: USB disconnect, device number 8 [ 428.992806][T10842] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 429.094428][ T8705] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 429.137631][T11432] chnl_net:caif_netlink_parms(): no params data found 20:42:55 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 20:42:55 executing program 4: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 429.371430][T10842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.382083][T10842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.391456][T10842] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 429.404915][ T27] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 429.502947][ T8705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.513433][ T8705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.522953][ T8705] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 429.552888][T10842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.562615][T10842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.570903][T10842] usb 4-1: Product: syz [ 429.575731][T10842] usb 4-1: Manufacturer: syz [ 429.580487][T10842] usb 4-1: SerialNumber: syz [ 429.682904][ T27] usb 2-1: device descriptor read/64, error 18 [ 429.711582][T11432] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.719146][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.729264][T11432] device bridge_slave_0 entered promiscuous mode [ 429.802210][T11432] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.809899][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.820345][T11432] device bridge_slave_1 entered promiscuous mode [ 429.834526][ T8705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.843932][ T8705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.852026][ T8705] usb 1-1: Product: syz [ 429.856463][ T8705] usb 1-1: Manufacturer: syz [ 429.861171][ T8705] usb 1-1: SerialNumber: syz [ 429.933687][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.953226][T10988] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 429.960599][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.976544][T10842] usb 4-1: 0:2 : does not exist [ 430.022228][T10842] usb 4-1: USB disconnect, device number 15 [ 430.129380][T11432] team0: Port device team_slave_0 added [ 430.146229][T11432] team0: Port device team_slave_1 added [ 430.155324][ T27] usb 2-1: device descriptor read/64, error 18 [ 430.226398][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.234922][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.261076][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.293187][ T8705] usb 1-1: 0:2 : does not exist [ 430.294155][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.305347][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.331686][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.343804][T10988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.354956][T10988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.364145][T10988] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 430.393191][ T8705] usb 1-1: USB disconnect, device number 20 [ 430.432710][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd 20:42:56 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:42:56 executing program 4: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 430.562239][T11432] device hsr_slave_0 entered promiscuous mode [ 430.634628][T10988] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.643936][T10988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.652082][T10988] usb 3-1: Product: syz [ 430.656545][T10988] usb 3-1: Manufacturer: syz [ 430.661309][T10988] usb 3-1: SerialNumber: syz [ 430.694238][T11432] device hsr_slave_1 entered promiscuous mode [ 430.703564][ T27] usb 2-1: device descriptor read/64, error 18 [ 430.722750][T11432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.730401][T11432] Cannot create hsr debugfs directory 20:42:57 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 431.094037][ T27] usb 2-1: device descriptor read/64, error 18 [ 431.153935][T10988] usb 3-1: 0:2 : does not exist [ 431.210979][ T8704] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 431.213041][ T27] usb usb2-port1: attempt power cycle [ 431.228080][T10988] usb 3-1: USB disconnect, device number 9 [ 431.536636][T11432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.561258][T11432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.586658][ T8704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.597157][ T8704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.606442][ T8704] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 431.616601][ T3205] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 431.684249][T11432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.771250][T11432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 431.885737][ T8704] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.895513][ T8704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.903805][ T8704] usb 4-1: Product: syz [ 431.908109][ T8704] usb 4-1: Manufacturer: syz [ 431.912929][ T8704] usb 4-1: SerialNumber: syz [ 431.943227][ T27] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 432.004527][ T3205] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.015115][ T3205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.024269][ T3205] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 432.179612][ T27] usb 2-1: device descriptor read/8, error -71 [ 432.234533][ T3205] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.244837][ T3205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.253096][ T3205] usb 1-1: Product: syz [ 432.257348][ T3205] usb 1-1: Manufacturer: syz [ 432.262031][ T3205] usb 1-1: SerialNumber: syz [ 432.356102][ T8704] usb 4-1: 0:2 : does not exist [ 432.396589][ T27] usb 2-1: device descriptor read/8, error -71 [ 432.409366][ T8704] usb 4-1: USB disconnect, device number 16 [ 432.611010][T11432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.674705][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.684122][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.713984][T11432] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.724238][ T3205] usb 1-1: 0:2 : does not exist [ 432.793786][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.804696][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.814709][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.821944][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.850006][ T3205] usb 1-1: USB disconnect, device number 21 [ 432.953942][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.964283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.974340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.983773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.991006][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.000193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.045113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.078377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.093316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.147179][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.157639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.168890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.179323][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.189128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.256432][T11432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.270161][T11432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.320573][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.330524][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.474262][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.482051][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.541004][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.856356][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.866854][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.954600][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.964459][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.997108][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.006799][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.023316][T11432] device veth0_vlan entered promiscuous mode [ 434.088766][T11432] device veth1_vlan entered promiscuous mode [ 434.218956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.228813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.239083][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.249306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.273379][T11432] device veth0_macvtap entered promiscuous mode [ 434.327293][T11432] device veth1_macvtap entered promiscuous mode [ 434.337581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.347327][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.419921][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 434.430579][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.440718][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 434.451340][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.461351][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 434.472018][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.482845][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 434.493453][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.503488][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 434.514098][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.529028][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.563869][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.574663][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.652676][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 434.663352][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.673488][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 434.684117][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.694203][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 434.704864][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.714898][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 434.725526][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.735540][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 434.746939][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.761797][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.790278][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.801682][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.883335][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 437.254239][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.264755][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.274480][ T27] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 437.633936][ T27] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.643544][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.651664][ T27] usb 6-1: Product: syz [ 437.656130][ T27] usb 6-1: Manufacturer: syz [ 437.660873][ T27] usb 6-1: SerialNumber: syz [ 438.184278][ T27] usb 6-1: 0:2 : does not exist [ 438.309192][ T27] usb 6-1: USB disconnect, device number 2 [ 438.349184][T10340] Bluetooth: hci5: command 0x0409 tx timeout 20:43:05 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20:43:05 executing program 4: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 20:43:05 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20:43:05 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:05 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) 20:43:05 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 439.693162][ T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 439.793131][ T8705] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 439.801242][ T3205] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 439.824327][ T12] usb 4-1: new high-speed USB device number 17 using dummy_hcd 20:43:06 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 439.983161][ T8704] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 440.061955][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.072632][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.081836][ T27] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 440.094354][ T3205] usb 2-1: device descriptor read/64, error 18 [ 440.184833][ T8705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.195423][ T8705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.204845][ T8705] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 440.214749][ T12] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.225363][ T12] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.236235][ T12] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 440.394544][ T8704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.394652][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 440.404995][ T8704] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.405129][ T8704] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 440.525525][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.529163][ T3205] usb 2-1: device descriptor read/64, error 18 [ 440.534820][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.534890][ T27] usb 1-1: Product: syz [ 440.554096][ T27] usb 1-1: Manufacturer: syz [ 440.558768][ T27] usb 1-1: SerialNumber: syz [ 440.596342][ T8704] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.605905][ T8704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.614528][ T8704] usb 6-1: Product: syz [ 440.618820][ T8704] usb 6-1: Manufacturer: syz [ 440.623616][ T8704] usb 6-1: SerialNumber: syz [ 440.630478][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.639977][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.648257][ T12] usb 4-1: Product: syz [ 440.652554][ T12] usb 4-1: Manufacturer: syz [ 440.657406][ T12] usb 4-1: SerialNumber: syz [ 440.663803][ T8705] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.673216][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.681334][ T8705] usb 3-1: Product: syz [ 440.685732][ T8705] usb 3-1: Manufacturer: syz [ 440.690461][ T8705] usb 3-1: SerialNumber: syz [ 440.853037][ T3205] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 440.994216][ T27] usb 1-1: 0:2 : does not exist [ 441.155339][ T3205] usb 2-1: device descriptor read/64, error 18 [ 441.205046][ T8705] usb 3-1: 0:2 : does not exist [ 441.213824][ T27] usb 1-1: USB disconnect, device number 22 [ 441.373973][T10340] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 441.383622][ T8705] usb 3-1: USB disconnect, device number 10 [ 441.403696][ T12] usb 4-1: 0:2 : does not exist [ 441.564586][ T8704] usb 6-1: 0:2 : does not exist [ 441.570179][ T3205] usb 2-1: device descriptor read/64, error 18 [ 441.625229][ T12] usb 4-1: USB disconnect, device number 17 [ 441.646608][T10340] usb 5-1: device descriptor read/64, error 18 [ 441.694450][ T3205] usb usb2-port1: attempt power cycle [ 441.836067][ T8704] usb 6-1: USB disconnect, device number 3 20:43:08 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) [ 442.046155][T10340] usb 5-1: device descriptor read/64, error 18 20:43:08 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) 20:43:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r3, &(0x7f0000007fc0), 0x60, 0x0) 20:43:08 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 442.313436][T10340] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 442.453375][ T3205] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 442.473759][ T17] Bluetooth: hci5: command 0x040f tx timeout [ 442.583093][T10340] usb 5-1: device descriptor read/64, error 18 20:43:08 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 442.694618][ T3205] usb 2-1: device descriptor read/8, error -71 [ 442.903205][ T3205] usb 2-1: device descriptor read/8, error -71 [ 442.968521][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 442.978810][T10340] usb 5-1: device descriptor read/64, error 18 [ 443.104654][T10340] usb usb5-port1: attempt power cycle [ 443.133221][ T17] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 443.176928][ T12] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 443.237897][ T8706] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 443.255915][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 443.394383][ T3205] usb 2-1: new high-speed USB device number 35 using dummy_hcd 20:43:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r3, &(0x7f0000007fc0), 0x60, 0x0) [ 443.494632][ T3205] usb 2-1: Invalid ep0 maxpacket: 0 [ 443.501168][ T3205] usb usb2-port1: unable to enumerate USB device [ 443.506091][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.517903][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.527118][ T17] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 443.584798][ T12] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.595762][ T12] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.604914][ T12] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 443.665006][ T8706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.675749][ T8706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.684894][ T8706] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 443.734612][ T17] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.743957][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.752051][ T17] usb 1-1: Product: syz [ 443.756548][ T17] usb 1-1: Manufacturer: syz [ 443.761319][ T17] usb 1-1: SerialNumber: syz [ 443.853473][T10340] usb 5-1: new high-speed USB device number 11 using dummy_hcd 20:43:10 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 443.942346][ T12] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.951667][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.959934][ T12] usb 3-1: Product: syz [ 443.964344][ T12] usb 3-1: Manufacturer: syz [ 443.969075][ T12] usb 3-1: SerialNumber: syz [ 443.977175][ T8706] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.986563][ T8706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.986958][T10340] usb 5-1: device descriptor read/8, error -71 [ 443.995391][ T8706] usb 4-1: Product: syz [ 444.005462][ T8706] usb 4-1: Manufacturer: syz [ 444.010196][ T8706] usb 4-1: SerialNumber: syz [ 444.069490][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 444.173866][ T17] usb 1-1: 0:2 : does not exist [ 444.210974][T10340] usb 5-1: device descriptor read/8, error -71 [ 444.242489][ T17] usb 1-1: USB disconnect, device number 23 [ 444.443763][ T12] usb 3-1: 0:2 : does not exist [ 444.544159][ T12] usb 3-1: USB disconnect, device number 11 [ 444.556097][ T27] Bluetooth: hci5: command 0x0419 tx timeout [ 444.564442][ T8706] usb 4-1: 0:2 : does not exist 20:43:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r3, &(0x7f0000007fc0), 0x60, 0x0) [ 444.727832][ T8706] usb 4-1: USB disconnect, device number 18 20:43:11 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) 20:43:11 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 445.043793][T10340] usb 5-1: new high-speed USB device number 12 using dummy_hcd 20:43:11 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 445.144290][T10340] usb 5-1: Invalid ep0 maxpacket: 0 [ 445.153440][T10340] usb usb5-port1: unable to enumerate USB device [ 445.397148][T11979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 445.613515][ T8706] usb 1-1: new high-speed USB device number 24 using dummy_hcd 20:43:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r3, &(0x7f0000007fc0), 0x60, 0x0) [ 445.704539][T10340] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 445.826655][ T8704] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 445.934768][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 446.016048][ T8706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.026526][ T8706] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.036295][ T8706] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 446.075738][T10340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.086118][T10340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.095355][T10340] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:43:12 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 446.258411][ T8704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.269103][ T8704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.278459][ T8704] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 446.384484][T10340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.394112][T10340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.402392][T10340] usb 3-1: Product: syz [ 446.406912][T10340] usb 3-1: Manufacturer: syz [ 446.411672][T10340] usb 3-1: SerialNumber: syz [ 446.425221][ T8706] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.434780][ T8706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.443513][ T8706] usb 1-1: Product: syz [ 446.447792][ T8706] usb 1-1: Manufacturer: syz [ 446.452482][ T8706] usb 1-1: SerialNumber: syz 20:43:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 446.544920][ T8704] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.554528][ T8704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.562708][ T8704] usb 4-1: Product: syz [ 446.567175][ T8704] usb 4-1: Manufacturer: syz [ 446.571928][ T8704] usb 4-1: SerialNumber: syz [ 446.844343][T10340] usb 3-1: 0:2 : does not exist [ 446.904615][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 446.928265][T10340] usb 3-1: USB disconnect, device number 12 [ 446.963839][ T8706] usb 1-1: 0:2 : does not exist [ 447.035547][ T3205] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 447.044481][ T8706] usb 1-1: USB disconnect, device number 24 [ 447.094728][ T8704] usb 4-1: 0:2 : does not exist 20:43:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r7, 0x0, r7) [ 447.188433][ T8704] usb 4-1: USB disconnect, device number 19 20:43:13 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) [ 447.439927][ T3205] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 447.449450][ T3205] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 447.460006][ T3205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 20:43:13 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:13 executing program 3: 20:43:13 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 447.704267][ T3205] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.713871][ T3205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.722029][ T3205] usb 2-1: Product: syz [ 447.726593][ T3205] usb 2-1: Manufacturer: syz [ 447.731380][ T3205] usb 2-1: SerialNumber: syz [ 447.750446][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:43:14 executing program 3: 20:43:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$unix(0x1, 0x2, 0x0) [ 448.184228][ T3205] usb 2-1: 0:2 : does not exist [ 448.203672][T10340] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 448.244090][ T3205] usb 2-1: USB disconnect, device number 36 [ 448.283360][ T8704] usb 1-1: new high-speed USB device number 25 using dummy_hcd 20:43:14 executing program 3: [ 448.423579][ T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 448.519483][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 448.565222][T10340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.576342][T10340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.586108][T10340] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 448.694673][ T27] usb 5-1: device descriptor read/64, error 18 [ 448.711941][ T8704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.722354][ T8704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.731672][ T8704] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 20:43:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) [ 448.806740][T10340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.816523][T10340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.825083][T10340] usb 3-1: Product: syz [ 448.829428][T10340] usb 3-1: Manufacturer: syz [ 448.834427][T10340] usb 3-1: SerialNumber: syz 20:43:15 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 448.955068][ T8704] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.964552][ T8704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.972680][ T8704] usb 1-1: Product: syz [ 448.977389][ T8704] usb 1-1: Manufacturer: syz [ 448.982355][ T8704] usb 1-1: SerialNumber: syz [ 449.114902][ T27] usb 5-1: device descriptor read/64, error 18 [ 449.204542][T10340] usb 3-1: 0:2 : does not exist [ 449.289189][T10340] usb 3-1: USB disconnect, device number 13 [ 449.383632][ T27] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 449.397991][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:43:15 executing program 1: [ 449.473749][ T8704] usb 1-1: 0:2 : does not exist [ 449.539555][ T8704] usb 1-1: USB disconnect, device number 25 [ 449.654423][ T27] usb 5-1: device descriptor read/64, error 18 20:43:15 executing program 1: 20:43:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/70) 20:43:15 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$inet6(0x10, 0x0, 0x0) 20:43:16 executing program 0: [ 450.043236][ T27] usb 5-1: device descriptor read/64, error 18 [ 450.164135][ T27] usb usb5-port1: attempt power cycle [ 450.221631][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:43:16 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 450.514996][T10340] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 450.874992][T10340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.885692][T10340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.895188][T10340] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 450.905065][ T27] usb 5-1: new high-speed USB device number 15 using dummy_hcd 20:43:17 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:17 executing program 1: 20:43:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 20:43:17 executing program 0: [ 451.084437][T10340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.093979][T10340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.102318][T10340] usb 3-1: Product: syz [ 451.107018][T10340] usb 3-1: Manufacturer: syz [ 451.111885][T10340] usb 3-1: SerialNumber: syz [ 451.143401][ T27] usb 5-1: device descriptor read/8, error -71 [ 451.281732][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:43:17 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 451.361961][ T27] usb 5-1: device descriptor read/8, error -71 20:43:17 executing program 0: 20:43:17 executing program 1: 20:43:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40805) [ 451.566061][T10340] usb 3-1: 0:2 : does not exist [ 451.658800][T10340] usb 3-1: USB disconnect, device number 14 [ 451.753556][T10842] Bluetooth: hci0: command 0x0406 tx timeout 20:43:18 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 452.004674][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:43:18 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:18 executing program 1: [ 452.155840][ T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd 20:43:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) [ 452.374409][ T27] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 452.383622][ T27] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 452.394123][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.606610][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 452.618062][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.627660][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.636021][ T27] usb 5-1: Product: syz [ 452.640339][ T27] usb 5-1: Manufacturer: syz [ 452.645292][ T27] usb 5-1: SerialNumber: syz [ 452.893896][ T8704] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 453.064555][ T27] usb 5-1: 0:2 : does not exist [ 453.116764][ T27] usb 5-1: USB disconnect, device number 16 [ 453.304633][ T8704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.315023][ T8704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.324292][ T8704] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 453.504646][ T8704] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.514784][ T8704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.522873][ T8704] usb 3-1: Product: syz [ 453.527921][ T8704] usb 3-1: Manufacturer: syz [ 453.532692][ T8704] usb 3-1: SerialNumber: syz 20:43:19 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:19 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 20:43:19 executing program 1: 20:43:19 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 453.794147][T12197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:43:20 executing program 1: [ 453.968328][ T8704] usb 3-1: 0:2 : does not exist 20:43:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 454.043838][ T12] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 454.070659][ T8704] usb 3-1: USB disconnect, device number 15 20:43:20 executing program 1: [ 454.327110][ T12] usb 4-1: device descriptor read/64, error 18 [ 454.334484][ T3205] usb 5-1: new high-speed USB device number 17 using dummy_hcd 20:43:20 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 20:43:20 executing program 2: 20:43:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:43:20 executing program 1: [ 454.704439][ T3205] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 454.713626][ T3205] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 454.724319][ T3205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.733931][ T12] usb 4-1: device descriptor read/64, error 18 [ 454.984398][ T3205] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.994072][ T3205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.002277][ T3205] usb 5-1: Product: syz [ 455.006840][ T3205] usb 5-1: Manufacturer: syz [ 455.011591][ T3205] usb 5-1: SerialNumber: syz [ 455.017919][ T12] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 455.324935][ T12] usb 4-1: device descriptor read/64, error 18 [ 455.485160][ T3205] usb 5-1: 0:2 : does not exist [ 455.550631][ T3205] usb 5-1: USB disconnect, device number 17 [ 455.734011][ T12] usb 4-1: device descriptor read/64, error 18 [ 455.863963][ T12] usb usb4-port1: attempt power cycle 20:43:22 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 456.464640][ T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 456.614012][ T12] usb 4-1: new high-speed USB device number 22 using dummy_hcd 20:43:22 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) socket(0x10, 0x803, 0x0) 20:43:22 executing program 2: 20:43:22 executing program 1: 20:43:22 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 456.779267][ T12] usb 4-1: device descriptor read/8, error -71 [ 456.836308][ T27] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 456.845680][ T27] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 456.856197][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.994127][ T12] usb 4-1: device descriptor read/8, error -71 20:43:23 executing program 2: 20:43:23 executing program 1: [ 457.135230][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.144761][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.152904][ T27] usb 5-1: Product: syz [ 457.157430][ T27] usb 5-1: Manufacturer: syz [ 457.162179][ T27] usb 5-1: SerialNumber: syz 20:43:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) [ 457.247011][T10842] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 457.524213][T10842] usb 1-1: device descriptor read/64, error 18 [ 457.577910][ T12] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 457.603940][ T27] usb 5-1: 0:2 : does not exist [ 457.684059][ T12] usb 4-1: Invalid ep0 maxpacket: 0 [ 457.699254][ T12] usb usb4-port1: unable to enumerate USB device [ 457.707788][ T27] usb 5-1: USB disconnect, device number 18 20:43:23 executing program 2: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 20:43:23 executing program 1: 20:43:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 457.915996][T10842] usb 1-1: device descriptor read/64, error 18 [ 458.193445][T10842] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 458.463582][T10842] usb 1-1: device descriptor read/64, error 18 20:43:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140), 0x2c}], 0x8) [ 458.858934][T10842] usb 1-1: device descriptor read/64, error 18 [ 458.983948][T10842] usb usb1-port1: attempt power cycle [ 459.703616][T10842] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 459.795282][T10842] usb 1-1: Invalid ep0 maxpacket: 0 [ 459.953875][T10842] usb 1-1: new high-speed USB device number 29 using dummy_hcd 20:43:26 executing program 3: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 20:43:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000010001001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e237e85dcb5823777276fb1c90000000100e60000000000000200000000000000efffffffffffffff0000000000000400e2a883d3000000000e030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080df0000000000000030006164647274797065000000000002000000200000000000800000000000007a3c0000000000000000000000000000280052454a4543540000800000cfdcf6e80000df1c0009000000ecff010000000006000000000000e0000001ac1414bb004a0000000400006772653000000000000004000000000000000000000000000000000000000000000091000000000000000000e884c354afa8a803279c0004000c000000000000000000000000000070009800000022b800000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff00b6122a913c23374e00000000000000000000000000070000000000affe4a8da7fec0ffffffff00000000ff00010000000000000000b00000000000000000000000000000000000000000000000000000000000000100000000000000010000007000980000000008d42500000000000000000000000000042800534554000000000000000000000000000000000000000000000000000801000004000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000001c6900b2b0b383346782a700000028000000ff00000000009d000000a60000000020ed0020000000000000000000feffffffcac7b8f6954e4b446b80a4f695cce0f15d9f50cbcc9cd7ff27c3aa1fe56bf4dd847c585509867fc805b79b653421d6076f537bbb173a76fae9926a787db631b42b7ac0ad0d13f1c09856b18a02228fdc152ea08f9dc8ad2d41499f2af8501972b5587f3c914e32940dd5582b791516caa084c4ae2d4855f99836133e5370c36096c8f8a02f5943d46e870280d50eec2342e792834e223f814e301e95a0adcb1ced915de3802bf315f3612cb84469859b5ca11e8a125b6b5aebafcfa484c6ab"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 20:43:26 executing program 2: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 20:43:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, &(0x7f00000000c0)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6881ac22c86703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822d979328c5352021a2b8b55b49f44e6d4455e90757eaf79b4304a00000000000000cd426e67ee5d27d543ca3e20338afe0a52d6f7ac5a5aff58ac68bd7e7acbe7afba408045f7ffa0d913af898284b0c354e3a5"}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:43:26 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 460.435900][T10842] usb 1-1: device not accepting address 29, error -71 [ 460.460544][T10842] usb usb1-port1: unable to enumerate USB device 20:43:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9de"}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:43:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) 20:43:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 460.876334][T10842] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 460.993709][ T8706] usb 4-1: new high-speed USB device number 24 using dummy_hcd 20:43:27 executing program 2: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 20:43:27 executing program 1: 20:43:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(r0, r1) [ 461.164733][T10842] usb 1-1: device descriptor read/64, error 18 [ 461.317282][ T8706] usb 4-1: device descriptor read/64, error 18 [ 461.553872][T10842] usb 1-1: device descriptor read/64, error 18 [ 461.729882][ T8706] usb 4-1: device descriptor read/64, error 18 [ 461.823710][T10842] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 462.014340][ T8706] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 462.103979][T10842] usb 1-1: device descriptor read/64, error 18 [ 462.314907][ T8706] usb 4-1: device descriptor read/64, error 18 [ 462.493654][T10842] usb 1-1: device descriptor read/64, error 18 [ 462.614219][T10842] usb usb1-port1: attempt power cycle [ 462.743753][ T8706] usb 4-1: device descriptor read/64, error 18 [ 462.875695][ T8706] usb usb4-port1: attempt power cycle [ 463.324666][T10842] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 463.624832][ T8706] usb 4-1: new high-speed USB device number 26 using dummy_hcd 20:43:29 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 20:43:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 20:43:29 executing program 1: 20:43:29 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:29 executing program 0: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 463.774064][ T8706] usb 4-1: device descriptor read/8, error -71 [ 463.805813][T10842] usb 1-1: device not accepting address 32, error -71 [ 463.984529][ T8706] usb 4-1: device descriptor read/8, error -71 20:43:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8bbd", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 20:43:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 20:43:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 464.254300][ T12] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 464.275031][T10842] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 464.363962][T10842] usb 1-1: Invalid ep0 maxpacket: 0 [ 464.370166][T10842] usb usb1-port1: unable to enumerate USB device [ 464.535693][ T28] audit: type=1400 audit(1596833010.637:10): avc: denied { create } for pid=12368 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 464.557397][ T12] usb 3-1: device descriptor read/64, error 18 [ 464.643695][ T28] audit: type=1804 audit(1596833010.737:11): pid=12372 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir008099286/syzkaller.BZsyRl/53/cgroup.controllers" dev="sda1" ino=16052 res=1 20:43:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) [ 464.800470][ T8706] usb 4-1: new high-speed USB device number 27 using dummy_hcd 20:43:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) 20:43:31 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f0000000540)}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000001c0)=""/234, 0xea) [ 464.984294][ T12] usb 3-1: device descriptor read/64, error 18 [ 465.062007][ T8706] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 465.070984][ T8706] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 465.081522][ T8706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.263962][ T12] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 465.298802][ T8706] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.308179][ T8706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.317025][ T8706] usb 4-1: Product: syz [ 465.321389][ T8706] usb 4-1: Manufacturer: syz [ 465.326260][ T8706] usb 4-1: SerialNumber: syz [ 465.568442][ T12] usb 3-1: device descriptor read/64, error 18 [ 465.765456][ T8706] usb 4-1: 0:2 : does not exist [ 465.856031][ T8706] usb 4-1: USB disconnect, device number 27 [ 466.037290][ T12] usb 3-1: device descriptor read/64, error 18 [ 466.164434][ T12] usb usb3-port1: attempt power cycle 20:43:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 20:43:32 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 20:43:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0xe8, 0xe8, 0x0, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'wg2\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x20000000, 0x5fffffc}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 20:43:32 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) [ 466.893885][ T12] usb 3-1: new high-speed USB device number 18 using dummy_hcd 20:43:33 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:33 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xa) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) 20:43:33 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:43:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) [ 467.114714][ T12] usb 3-1: device descriptor read/8, error -71 [ 467.115305][T10842] Bluetooth: hci1: command 0x0406 tx timeout [ 467.334164][ T12] usb 3-1: device descriptor read/8, error -71 20:43:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 20:43:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xa) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) [ 468.124011][ T12] usb 3-1: new high-speed USB device number 19 using dummy_hcd 20:43:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) [ 468.228306][ T12] usb 3-1: Invalid ep0 maxpacket: 0 [ 468.256244][ T12] usb usb3-port1: unable to enumerate USB device 20:43:34 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x39) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x40) 20:43:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) 20:43:34 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xa) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) [ 468.553882][ T12] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 468.995529][ T12] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 469.004609][ T12] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 469.015098][ T12] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.318404][ T12] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.327795][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.336629][ T12] usb 1-1: Product: syz [ 469.340937][ T12] usb 1-1: Manufacturer: syz [ 469.345736][ T12] usb 1-1: SerialNumber: syz [ 469.764221][ T12] usb 1-1: 0:2 : does not exist [ 469.805594][ T12] usb 1-1: USB disconnect, device number 34 20:43:36 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 20:43:36 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x2) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/158, 0x9e}], 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:43:36 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) 20:43:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f0000000140)='\xd1\x0fW5q\xe9%\x18\xd1W\xfc\x8c\xaawo\xe3b\xa5\xb5\xf7\x1dm\xafx\x14\xd0B\x01\x91<\x86\xbf\x84a\xb7|7\xf5\xd1\a\x92\x86\xb30[\x8b\xfc^\xc3\xe7\xdd\x91\xf0\xf8\xe8\x02\\\fPE7\xc7\xc3\xb3:\xb2bi\xfd{\xad\xb9A\x13\x8a\xc3\x9fO rY\xc5D\xb2\xa6\x16\xfe3;\x8b\x12\x13\x82^&1*Z\x14\x10\x88\x8ew\xe9\xad\xbcRkr\xbd/\xe0\xb1f\x8c\xe5#\x01O\x05\b\xd1\\\xc5\x18\xac\xfe\xfd\x8ai\xb7VJ3a>k\x1e\xfc\xbb\xe6E\xe6\x9b\xfd\x87\xd7\x7f&\xdb\'5\xfa\xf5\xa0hh\xf4\xf2}w\x10}v\xae;\xea=\xc7XP\xf2E\x97\x19\n\xda;\xafb\xe8\v\xc6\xe2\xa7|\n\xba\x952\x85,\xb8\x81\xb9)C\x9bk\xf3WI\xad\xc8\xf7\xf4\xe7D\xb2\t]\xfb\x96\xd9\xe3A\xdc\xf3\x10\x87\xcbT\'\xf9L\xbei\xf3\x8e\xb4c\xd0\xc7\x11\xa3\xfe6\t\xe5\xf44\xeb\xd3\x0ey\x10\x12\xfb\x97\x04Z\xf3\x1e\x93\xf6\xd6_\xe5\xe6(3\xd7[\x0e\x86=\xc7d\xffH\x82Z\x84\xa00L') [ 470.856518][T12494] nfs: Unknown parameter 'ÑW5qé%ÑWüŒªwoãb¥µ÷m¯xÐB‘<†¿„a·|7õÑ’†³0[‹ü^ÃçÝ‘ðøè\ PE7Çó:²biý{­¹AŠÃŸO rYÅD²¦þ3;‹‚^&1*ZˆŽwé­¼Rkr½/à±fŒå#OÑ\ŬþýŠi·VJ3a>kü»æEæ›ý‡×&Û'5úõ hhôò}w}v®;ê' 20:43:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 20:43:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f0000000140)='\xd1\x0fW5q\xe9%\x18\xd1W\xfc\x8c\xaawo\xe3b\xa5\xb5\xf7\x1dm\xafx\x14\xd0B\x01\x91<\x86\xbf\x84a\xb7|7\xf5\xd1\a\x92\x86\xb30[\x8b\xfc^\xc3\xe7\xdd\x91\xf0\xf8\xe8\x02\\\fPE7\xc7\xc3\xb3:\xb2bi\xfd{\xad\xb9A\x13\x8a\xc3\x9fO rY\xc5D\xb2\xa6\x16\xfe3;\x8b\x12\x13\x82^&1*Z\x14\x10\x88\x8ew\xe9\xad\xbcRkr\xbd/\xe0\xb1f\x8c\xe5#\x01O\x05\b\xd1\\\xc5\x18\xac\xfe\xfd\x8ai\xb7VJ3a>k\x1e\xfc\xbb\xe6E\xe6\x9b\xfd\x87\xd7\x7f&\xdb\'5\xfa\xf5\xa0hh\xf4\xf2}w\x10}v\xae;\xea=\xc7XP\xf2E\x97\x19\n\xda;\xafb\xe8\v\xc6\xe2\xa7|\n\xba\x952\x85,\xb8\x81\xb9)C\x9bk\xf3WI\xad\xc8\xf7\xf4\xe7D\xb2\t]\xfb\x96\xd9\xe3A\xdc\xf3\x10\x87\xcbT\'\xf9L\xbei\xf3\x8e\xb4c\xd0\xc7\x11\xa3\xfe6\t\xe5\xf44\xeb\xd3\x0ey\x10\x12\xfb\x97\x04Z\xf3\x1e\x93\xf6\xd6_\xe5\xe6(3\xd7[\x0e\x86=\xc7d\xffH\x82Z\x84\xa00L') 20:43:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) 20:43:37 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) [ 471.624263][ T3205] usb 3-1: new high-speed USB device number 20 using dummy_hcd 20:43:37 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x2) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/158, 0x9e}], 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 471.903884][ T3205] usb 3-1: device descriptor read/64, error 18 [ 472.298012][ T3205] usb 3-1: device descriptor read/64, error 18 [ 472.585231][ T3205] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 472.874435][ T3205] usb 3-1: device descriptor read/64, error 18 [ 473.284206][ T3205] usb 3-1: device descriptor read/64, error 18 [ 473.418661][ T3205] usb usb3-port1: attempt power cycle [ 474.144521][ T3205] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 474.235413][ T3205] usb 3-1: Invalid ep0 maxpacket: 0 20:43:40 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:43:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f0000000140)='\xd1\x0fW5q\xe9%\x18\xd1W\xfc\x8c\xaawo\xe3b\xa5\xb5\xf7\x1dm\xafx\x14\xd0B\x01\x91<\x86\xbf\x84a\xb7|7\xf5\xd1\a\x92\x86\xb30[\x8b\xfc^\xc3\xe7\xdd\x91\xf0\xf8\xe8\x02\\\fPE7\xc7\xc3\xb3:\xb2bi\xfd{\xad\xb9A\x13\x8a\xc3\x9fO rY\xc5D\xb2\xa6\x16\xfe3;\x8b\x12\x13\x82^&1*Z\x14\x10\x88\x8ew\xe9\xad\xbcRkr\xbd/\xe0\xb1f\x8c\xe5#\x01O\x05\b\xd1\\\xc5\x18\xac\xfe\xfd\x8ai\xb7VJ3a>k\x1e\xfc\xbb\xe6E\xe6\x9b\xfd\x87\xd7\x7f&\xdb\'5\xfa\xf5\xa0hh\xf4\xf2}w\x10}v\xae;\xea=\xc7XP\xf2E\x97\x19\n\xda;\xafb\xe8\v\xc6\xe2\xa7|\n\xba\x952\x85,\xb8\x81\xb9)C\x9bk\xf3WI\xad\xc8\xf7\xf4\xe7D\xb2\t]\xfb\x96\xd9\xe3A\xdc\xf3\x10\x87\xcbT\'\xf9L\xbei\xf3\x8e\xb4c\xd0\xc7\x11\xa3\xfe6\t\xe5\xf44\xeb\xd3\x0ey\x10\x12\xfb\x97\x04Z\xf3\x1e\x93\xf6\xd6_\xe5\xe6(3\xd7[\x0e\x86=\xc7d\xffH\x82Z\x84\xa00L') 20:43:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 20:43:40 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd0060bbb557f3b0b93742c379983fe48e8739ad153e144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44"], 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 474.641828][T12567] NFS: mount program didn't pass remote address 20:43:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f0000000140)='\xd1\x0fW5q\xe9%\x18\xd1W\xfc\x8c\xaawo\xe3b\xa5\xb5\xf7\x1dm\xafx\x14\xd0B\x01\x91<\x86\xbf\x84a\xb7|7\xf5\xd1\a\x92\x86\xb30[\x8b\xfc^\xc3\xe7\xdd\x91\xf0\xf8\xe8\x02\\\fPE7\xc7\xc3\xb3:\xb2bi\xfd{\xad\xb9A\x13\x8a\xc3\x9fO rY\xc5D\xb2\xa6\x16\xfe3;\x8b\x12\x13\x82^&1*Z\x14\x10\x88\x8ew\xe9\xad\xbcRkr\xbd/\xe0\xb1f\x8c\xe5#\x01O\x05\b\xd1\\\xc5\x18\xac\xfe\xfd\x8ai\xb7VJ3a>k\x1e\xfc\xbb\xe6E\xe6\x9b\xfd\x87\xd7\x7f&\xdb\'5\xfa\xf5\xa0hh\xf4\xf2}w\x10}v\xae;\xea=\xc7XP\xf2E\x97\x19\n\xda;\xafb\xe8\v\xc6\xe2\xa7|\n\xba\x952\x85,\xb8\x81\xb9)C\x9bk\xf3WI\xad\xc8\xf7\xf4\xe7D\xb2\t]\xfb\x96\xd9\xe3A\xdc\xf3\x10\x87\xcbT\'\xf9L\xbei\xf3\x8e\xb4c\xd0\xc7\x11\xa3\xfe6\t\xe5\xf44\xeb\xd3\x0ey\x10\x12\xfb\x97\x04Z\xf3\x1e\x93\xf6\xd6_\xe5\xe6(3\xd7[\x0e\x86=\xc7d\xffH\x82Z\x84\xa00L') 20:43:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 20:43:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fb4f93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 20:43:41 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 475.415154][ T3205] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 475.657235][ T3205] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 475.666401][ T3205] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 475.676848][ T3205] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.955906][ T3205] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.965285][ T3205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.973453][ T3205] usb 3-1: Product: syz [ 475.977988][ T3205] usb 3-1: Manufacturer: syz [ 475.982750][ T3205] usb 3-1: SerialNumber: syz [ 476.434683][ T3205] usb 3-1: 0:2 : does not exist [ 476.488470][ T3205] usb 3-1: USB disconnect, device number 23 20:43:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:43:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:43 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fb4f93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 20:43:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 477.242998][T12634] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:43:43 executing program 2: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800700, 0x2) 20:43:43 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 20:43:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:43:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24) exit(0x0) 20:43:44 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) socket$inet6_sctp(0xa, 0x0, 0x84) tkill(r0, 0x0) 20:43:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 20:43:44 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') 20:43:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffd38}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x800000000000000}, 0x0) 20:43:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) [ 479.410037][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.492868][T12700] 8021q: adding VLAN 0 to HW filter on device bond1 20:43:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12000000, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x5a84ae7d9c6b7621, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, [0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x14]}}, @IFA_FLAGS={0x8, 0x8, 0xe00}]}, 0x34}}, 0x0) 20:43:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24) exit(0x0) [ 479.655517][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.758930][T12703] 8021q: adding VLAN 0 to HW filter on device bond2 20:43:45 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000260001"], 0x24}}, 0x0) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 20:43:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000240), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:43:46 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f00000000c0)="b9ff030000", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x0) 20:43:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:47 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:43:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000240), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:43:47 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:47 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x4}], 0x400000000000085, 0x0) 20:43:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:48 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:43:48 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0xd3c6b85bf6ebad7f}) 20:43:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd0060bbb557f3b0b93742c379983fe48e8739ad153e144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x800000020001ffda, 0x40000000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 20:43:49 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x18, r1, 0x303, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 20:43:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:49 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r1, 0x0, r0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) 20:43:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008600)=[{{&(0x7f0000005980)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000006f40)={0x2, 0x0, @remote}, 0xe, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200015000000070800000000000286060000000000440ccf48ab87e7c745500810"], 0x20}}], 0x2, 0x0) 20:43:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:50 executing program 0: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmsg$sock(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50f5f38706578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed821fc508c36f8419d029c078411a42338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb", 0xc9}, {0x0}], 0x2}, 0x0) sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee7714903088dfd546a136d40646857b851b65a7a918c58881d275d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d48842400126f8703ddc55ba4e", 0xec}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a", 0x12}, {&(0x7f0000001600)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7deacf114c931c707559610cd1366220890b11cd862202abfbcd24a76a2f0f7044964480ebd12d0bca901ac0e4e3188cb74f2b45bc4f37e1694a1e15a039e34cf59a4c86cb1dc5210f4be91e84888a860ab5286ba2a15f0b04b178198d663c", 0x9b}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7228ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34c32e6b3", 0x72}, {&(0x7f0000001940)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a56a3ae461b9528b039a4f69e204b182765bfcff36add10caad94fd56acc52", 0x4b}, {&(0x7f00000019c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca31", 0x7d}], 0x1}}], 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f00000016c0)=ANY=[@ANYRESHEX, @ANYBLOB="cfd963e39d77714f6774ab249d746530be06bbbe58ee33fa13fdbd2b0b99ddde31d1d7d1a855bb822d8e257091838bef47e4cae932593e45bd52334b005ea59403cdb03f08decf854a92f33f1b98a4bf6d3ffd7f37d4", @ANYRESDEC], 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:43:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e000800005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000a50400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000ffff"], 0x24}, 0x1, 0x1400}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000660001ff030000fffb1ff7ffffffe300", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) 20:43:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) [ 484.638323][T12884] IPVS: ftp: loaded support on port[0] = 21 [ 484.721614][T12885] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.731520][T12885] device lo entered promiscuous mode [ 484.739401][T12885] device tunl0 entered promiscuous mode [ 484.749089][T12885] device gre0 entered promiscuous mode [ 484.758837][T12885] device gretap0 entered promiscuous mode [ 484.766996][T12885] device erspan0 entered promiscuous mode [ 484.775349][T12885] device ip_vti0 entered promiscuous mode [ 484.785098][T12885] device ip6_vti0 entered promiscuous mode [ 484.796383][T12885] device sit0 entered promiscuous mode [ 484.806078][T12885] device ip6tnl0 entered promiscuous mode [ 484.815962][T12885] device ip6gre0 entered promiscuous mode [ 484.825949][T12885] device syz_tun entered promiscuous mode [ 484.834169][T12885] device ip6gretap0 entered promiscuous mode [ 484.842323][T12885] device bridge0 entered promiscuous mode [ 484.850238][T12885] device vcan0 entered promiscuous mode [ 484.857035][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 484.865820][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 484.873498][T12885] device bond0 entered promiscuous mode [ 484.880675][T12885] device bond_slave_0 entered promiscuous mode [ 484.887635][T12885] device bond_slave_1 entered promiscuous mode [ 484.897668][T12885] device team0 entered promiscuous mode [ 484.903312][T12885] device team_slave_0 entered promiscuous mode [ 484.910219][T12885] device team_slave_1 entered promiscuous mode [ 484.919832][T12885] device dummy0 entered promiscuous mode 20:43:51 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) [ 484.929114][T12885] device nlmon0 entered promiscuous mode [ 485.581484][T12885] device caif0 entered promiscuous mode [ 485.587620][T12885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.607827][T12898] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.2'. 20:43:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:52 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:52 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000140), 0x4) 20:43:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:53 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0xc000) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)="d91c459e", 0x4}], 0x1}, 0x0) 20:43:53 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:53 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:53 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000140)=0x2, 0x4) 20:43:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) [ 487.635500][T10842] Bluetooth: hci2: command 0x0406 tx timeout 20:43:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, 0x0, &(0x7f00000021c0)=""/4089}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000180)={r0, 0x0, &(0x7f000001a740)=""/102397}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 20:43:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:54 executing program 3: r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:54 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 20:43:54 executing program 5: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:55 executing program 2: gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000043000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe13810000850000000d000000b70000000000000095000000000000007961e62273faa6884c44825cc4f142133d4a1cac53819fda7ffe332b0d27517495db22c369fc01b191533df23e4a10cbd4dfb403d82acd600312817f2b17e678d15e020912aa8ef860dd810900f886dc0154419e857178e246297048629c6326bfe8f81c360dd7c9efafb9ff34fedbb2ca4d35f6b5f65e8894425d22dce799b0a5d65dee16bffed85ac530e49bbe2cc6e0745503aa6c636e4b0d78e3d530d91e8213cc3f3aa07295e86df0557be41f4f982eb553b1b9e36d77174f29c57c0db60076f5ab323325dbfa90e0edab3ddb5ed8fa984bb0fcb52ad14988f58de2ec276e5d9d9464ede6deb474604da29f1b7d924c96d8c04e5ff44ca8ee268b0849a436284bc99d0b03487b4c221a26c27228aea193cb831124187765d3c1b162bd4e64b2ca92c22afa1ecff1edecd4de1e8d2c88b2b23ad75e3774a70363ad121331b0988b9fa3fd3bdd1f35369863e3c2bc37067a1fe90d7cc733eb753fc3fbe8fa03ed9c061732486e68b39e02a63cbff4af35dd8a17dd33dfa196911b654e60fa881a77b295a8ed9374cb784e9afcfd3089de85ab75359d41bfe0240f5aaa9e037891216b4c02291f122c51c1e3291195615f13acdbe142541ba3ba10abca64f1cb9d9c819422bf2cf04699902d8e19a9ba1afc6edc2e615a527698f2f84fec03800c18f1731575893aafb7acbe7c3eb1ae1576f0e7e88e57dc1c3f7639768e84dda015f8fa1ecfba22ade43e667d8cc897bec4921aa032f4285a7b6cc0b16312ec7fc71724fcde39982c720fbad55be728acdc4acb8ce24c6fc3bf21e7f2f9c1916f77d6db064ab7ba34debf9fd2d0dd40b341afc6600b71590b6554c144cda1be00d1910c024351e926f30153cadfbeb9110ff0696fde63973c0a1d85e37c34d1842d50af6e53ec269554a765414221200100000000000a34d0ceefe47d08a322dfc37b043c7b64479adba76de5cffadade98dbe0b7aed774903aa83a32376de00685ba9a7383ddf6dd72b086c186ead3c3ad0b90cc34b45212cbffc0d972e81d6fe7a67c646309153cb780338e9c69ead6dec4d6b4e5f532a3910e209e7b96c159d5d3b806af975d748ff1e5ea78bd64c65458c2add8626e709558fcb5f8a6e40ecec05e2d94f79eff06e41b7b10c5d6fb1cf373de0d4660e460e79c5b27e01a38ce31ccd9f8396d285d572847e5eb411277abd25a339424c5997eb0bcb64a34e157db48bdb7ffd1042598cc36a8715c88418f62be618904e548b0ff43b57df519837f724eeedd764149df0e691c62f41ba86af193accfefece951990da137678c41b8461bea1bf8e265385eb8f09009f6d88528f544c49e22e7a601689cc328d65ca30f4b3cb8f13ba5ff3c2bc5412628e7bee476649156795019b72294ab12188b21d5496a8a4ba7ac1d0aa81b08c3ab75ca992ce8a051bc14e130f38eb9c536caac5e554c590da7d578500925426c6056aa780b2daa19fb0f92f36b530350480d63bc26daf49b6622a18874a9216b088f7533c02ef398eaafabcf29e2f321f75ae67c3226e3408c06aa9d45c98a7e5f737001ce6e96a359e5f39ce8bfe4e72e256f1800ccb873977a5d8fa4444b7939d2f4bd18155a772ea009960422abc9115b53dfb825caef2f90585ad34690db3ee6ae0c311be988ef18c6624d799d88676adb58bac8c3b61f8f27ed6341eb1253d97c9460ab5f177d09f668efa47d9708c52dd4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe100004000638477fbac14143fe0004301c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x2, 0x4, 0x6d, 0x8000000000000002, 0x0, 0x0, 0x0, [], r2}, 0x40) 20:43:55 executing program 3: r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) [ 488.938672][T12957] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 20:43:55 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 20:43:55 executing program 5: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:55 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6%\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') socket$kcm(0x10, 0x0, 0x10) close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 20:43:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:55 executing program 3: r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:56 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 20:43:56 executing program 5: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:56 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:56 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8940, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0xda00) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000080)="020043d05d25b666cd783f", 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0xb, 0x40, 0x401}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000011000)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000140)='cgroup.stat\x00', r2}, 0x30) 20:43:57 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 20:43:57 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:57 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:57 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 20:43:57 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 20:43:57 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 20:43:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:58 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:58 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) [ 492.414823][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd 20:43:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) 20:43:58 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) [ 492.658381][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 492.776020][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 492.787105][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 492.797260][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 492.807223][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 492.817248][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 492.827294][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 32 20:43:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100), 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x6) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) tkill(r0, 0x1d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) 20:43:59 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:43:59 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x8}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 20:43:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) [ 493.246058][ T27] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 493.255478][ T27] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 493.263702][ T27] usb 3-1: Product: syz [ 493.356076][ T27] usb 3-1: config 0 descriptor?? [ 493.431908][ T27] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 493.530792][ T27] scsi host1: usb-storage 3-1:0.0 [ 494.558406][ T9050] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 494.572915][ T9050] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 494.616126][ T9050] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 494.641792][ T9050] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 494.664606][ T27] usb 3-1: USB disconnect, device number 24 [ 494.680705][ T39] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 494.690784][ T1512] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 494.702332][ T1512] sd 1:0:0:1: [sdc] Sense not available. [ 494.708354][ T1512] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 494.715726][ T1512] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 494.798392][ T1512] ===================================================== [ 494.805465][ T1512] BUG: KMSAN: uninit-value in scsi_mode_sense+0x10f0/0x17b0 [ 494.812786][ T1512] CPU: 1 PID: 1512 Comm: kworker/u4:22 Not tainted 5.8.0-rc5-syzkaller #0 [ 494.821287][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.831485][ T1512] Workqueue: events_unbound async_run_entry_fn [ 494.837701][ T1512] Call Trace: [ 494.841067][ T1512] dump_stack+0x21c/0x280 [ 494.845461][ T1512] kmsan_report+0xf7/0x1e0 [ 494.849906][ T1512] __msan_warning+0x58/0xa0 [ 494.854433][ T1512] scsi_mode_sense+0x10f0/0x17b0 [ 494.859495][ T1512] sd_revalidate_disk+0x4ffa/0xdae0 [ 494.864736][ T1512] ? kobject_put+0x2d4/0x490 [ 494.869420][ T1512] ? sd_resume+0x150/0x260 [ 494.873858][ T1512] sd_probe+0x10d1/0x18c0 [ 494.878222][ T1512] ? sd_print_result+0x6b0/0x6b0 [ 494.883254][ T1512] really_probe+0xf20/0x20b0 [ 494.887875][ T1512] ? kmsan_get_metadata+0x116/0x180 [ 494.893130][ T1512] driver_probe_device+0x293/0x390 [ 494.898270][ T1512] __device_attach_driver+0x63f/0x830 [ 494.903683][ T1512] bus_for_each_drv+0x2ca/0x3f0 [ 494.908550][ T1512] ? coredump_store+0xf0/0xf0 [ 494.913268][ T1512] __device_attach_async_helper+0x31a/0x3f0 [ 494.919197][ T1512] async_run_entry_fn+0x1a2/0x7d0 [ 494.924244][ T1512] ? kmsan_get_metadata+0x116/0x180 [ 494.929463][ T1512] ? __device_attach_driver+0x830/0x830 [ 494.935029][ T1512] ? async_schedule_node_domain+0xcf0/0xcf0 [ 494.941013][ T1512] process_one_work+0x1688/0x2140 [ 494.946116][ T1512] worker_thread+0x10bc/0x2730 [ 494.950897][ T1512] ? kmsan_get_metadata+0x116/0x180 [ 494.956148][ T1512] kthread+0x551/0x590 [ 494.960238][ T1512] ? process_one_work+0x2140/0x2140 [ 494.965457][ T1512] ? kthread_blkcg+0x110/0x110 [ 494.970279][ T1512] ret_from_fork+0x1f/0x30 [ 494.974716][ T1512] [ 494.977053][ T1512] Uninit was stored to memory at: [ 494.982093][ T1512] kmsan_internal_chain_origin+0xad/0x130 [ 494.987829][ T1512] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 494.993836][ T1512] kmsan_memcpy_metadata+0xb/0x10 [ 494.998875][ T1512] __msan_memcpy+0x43/0x50 [ 495.003389][ T1512] bio_copy_kern_endio_read+0x494/0x5f0 [ 495.008953][ T1512] bio_endio+0xce1/0xde0 [ 495.013224][ T1512] blk_update_request+0x1178/0x2710 [ 495.018439][ T1512] scsi_end_request+0x102/0xc00 [ 495.023301][ T1512] scsi_io_completion+0x34f/0x2f20 [ 495.028494][ T1512] scsi_finish_command+0x85b/0x880 [ 495.033618][ T1512] scsi_softirq_done+0x683/0xa80 [ 495.038569][ T1512] blk_done_softirq+0x2fe/0x4e0 [ 495.043485][ T1512] __do_softirq+0x2ea/0x7f5 [ 495.047991][ T1512] [ 495.050319][ T1512] Uninit was created at: [ 495.054577][ T1512] kmsan_save_stack_with_flags+0x3c/0x90 [ 495.060223][ T1512] kmsan_alloc_page+0xc5/0x1a0 [ 495.065101][ T1512] __alloc_pages_nodemask+0xdf0/0x1030 [ 495.070620][ T1512] alloc_pages_current+0x685/0xb50 [ 495.075755][ T1512] blk_rq_map_kern+0xdda/0x1570 [ 495.080620][ T1512] __scsi_execute+0x318/0xc80 [ 495.085311][ T1512] scsi_mode_sense+0x600/0x17b0 [ 495.090171][ T1512] sd_revalidate_disk+0x4ffa/0xdae0 [ 495.095389][ T1512] sd_probe+0x10d1/0x18c0 [ 495.099740][ T1512] really_probe+0xf20/0x20b0 [ 495.104341][ T1512] driver_probe_device+0x293/0x390 [ 495.109482][ T1512] __device_attach_driver+0x63f/0x830 [ 495.114864][ T1512] bus_for_each_drv+0x2ca/0x3f0 [ 495.119739][ T1512] __device_attach_async_helper+0x31a/0x3f0 [ 495.125647][ T1512] async_run_entry_fn+0x1a2/0x7d0 [ 495.130686][ T1512] process_one_work+0x1688/0x2140 [ 495.135738][ T1512] worker_thread+0x10bc/0x2730 [ 495.140529][ T1512] kthread+0x551/0x590 [ 495.144703][ T1512] ret_from_fork+0x1f/0x30 [ 495.149121][ T1512] ===================================================== [ 495.156068][ T1512] Disabling lock debugging due to kernel taint [ 495.162226][ T1512] Kernel panic - not syncing: panic_on_warn set ... [ 495.168832][ T1512] CPU: 1 PID: 1512 Comm: kworker/u4:22 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 495.178723][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.188826][ T1512] Workqueue: events_unbound async_run_entry_fn [ 495.194987][ T1512] Call Trace: [ 495.198302][ T1512] dump_stack+0x21c/0x280 [ 495.202740][ T1512] panic+0x4d7/0xef7 [ 495.206733][ T1512] ? add_taint+0x17c/0x210 [ 495.211174][ T1512] kmsan_report+0x1df/0x1e0 [ 495.215704][ T1512] __msan_warning+0x58/0xa0 [ 495.220236][ T1512] scsi_mode_sense+0x10f0/0x17b0 [ 495.225231][ T1512] sd_revalidate_disk+0x4ffa/0xdae0 [ 495.230472][ T1512] ? kobject_put+0x2d4/0x490 [ 495.235120][ T1512] ? sd_resume+0x150/0x260 [ 495.239558][ T1512] sd_probe+0x10d1/0x18c0 [ 495.243925][ T1512] ? sd_print_result+0x6b0/0x6b0 [ 495.248883][ T1512] really_probe+0xf20/0x20b0 [ 495.253503][ T1512] ? kmsan_get_metadata+0x116/0x180 [ 495.258736][ T1512] driver_probe_device+0x293/0x390 [ 495.263878][ T1512] __device_attach_driver+0x63f/0x830 [ 495.269287][ T1512] bus_for_each_drv+0x2ca/0x3f0 [ 495.274158][ T1512] ? coredump_store+0xf0/0xf0 [ 495.278868][ T1512] __device_attach_async_helper+0x31a/0x3f0 [ 495.284796][ T1512] async_run_entry_fn+0x1a2/0x7d0 [ 495.289843][ T1512] ? kmsan_get_metadata+0x116/0x180 [ 495.295062][ T1512] ? __device_attach_driver+0x830/0x830 [ 495.300631][ T1512] ? async_schedule_node_domain+0xcf0/0xcf0 [ 495.306542][ T1512] process_one_work+0x1688/0x2140 [ 495.311640][ T1512] worker_thread+0x10bc/0x2730 [ 495.316427][ T1512] ? kmsan_get_metadata+0x116/0x180 [ 495.321678][ T1512] kthread+0x551/0x590 [ 495.325779][ T1512] ? process_one_work+0x2140/0x2140 [ 495.331012][ T1512] ? kthread_blkcg+0x110/0x110 [ 495.335818][ T1512] ret_from_fork+0x1f/0x30 [ 495.341287][ T1512] Kernel Offset: disabled [ 495.345622][ T1512] Rebooting in 86400 seconds..