Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. 2020/05/22 20:43:22 fuzzer started 2020/05/22 20:43:22 dialing manager at 10.128.0.26:38661 2020/05/22 20:43:22 syscalls: 3055 2020/05/22 20:43:22 code coverage: enabled 2020/05/22 20:43:22 comparison tracing: enabled 2020/05/22 20:43:22 extra coverage: enabled 2020/05/22 20:43:22 setuid sandbox: enabled 2020/05/22 20:43:22 namespace sandbox: enabled 2020/05/22 20:43:22 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/22 20:43:22 fault injection: enabled 2020/05/22 20:43:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/22 20:43:22 net packet injection: enabled 2020/05/22 20:43:22 net device setup: enabled 2020/05/22 20:43:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/22 20:43:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/22 20:43:22 USB emulation: enabled 20:45:23 executing program 0: syzkaller login: [ 182.763497][ T6832] IPVS: ftp: loaded support on port[0] = 21 20:45:23 executing program 1: [ 182.933136][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 183.066933][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.083875][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.103805][ T6832] device bridge_slave_0 entered promiscuous mode [ 183.125016][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.132238][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.144910][ T6832] device bridge_slave_1 entered promiscuous mode [ 183.185690][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.197929][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.227333][ T6832] team0: Port device team_slave_0 added [ 183.246686][ T6832] team0: Port device team_slave_1 added 20:45:23 executing program 2: [ 183.271515][ T6965] IPVS: ftp: loaded support on port[0] = 21 [ 183.277097][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.287613][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.321463][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.339350][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.354912][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.384153][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.488391][ T6832] device hsr_slave_0 entered promiscuous mode 20:45:24 executing program 3: [ 183.614280][ T6832] device hsr_slave_1 entered promiscuous mode [ 183.707051][ T7012] IPVS: ftp: loaded support on port[0] = 21 [ 183.903021][ T6965] chnl_net:caif_netlink_parms(): no params data found [ 183.995874][ T7141] IPVS: ftp: loaded support on port[0] = 21 [ 184.087949][ T7012] chnl_net:caif_netlink_parms(): no params data found 20:45:24 executing program 4: [ 184.285583][ T6832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.384503][ T6832] netdevsim netdevsim0 netdevsim1: renamed from eth1 20:45:25 executing program 5: [ 184.474306][ T6832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.552988][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.566762][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.579656][ T6965] device bridge_slave_0 entered promiscuous mode [ 184.628586][ T6832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.640914][ T7291] IPVS: ftp: loaded support on port[0] = 21 [ 184.686059][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.693296][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.705173][ T6965] device bridge_slave_1 entered promiscuous mode [ 184.721267][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.735829][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.746662][ T7012] device bridge_slave_0 entered promiscuous mode [ 184.787419][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.799278][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.807043][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.817658][ T7012] device bridge_slave_1 entered promiscuous mode [ 184.843752][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.860639][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.895288][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.908507][ T7323] IPVS: ftp: loaded support on port[0] = 21 [ 185.001193][ T6965] team0: Port device team_slave_0 added [ 185.049538][ T6965] team0: Port device team_slave_1 added [ 185.091927][ T7012] team0: Port device team_slave_0 added [ 185.106100][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.119334][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.149232][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.171403][ T7012] team0: Port device team_slave_1 added [ 185.201513][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.209018][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.236684][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.250294][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.258203][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.287818][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.300417][ T7141] chnl_net:caif_netlink_parms(): no params data found [ 185.332560][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.340015][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.366286][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.511178][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 185.567625][ T7012] device hsr_slave_0 entered promiscuous mode [ 185.614217][ T7012] device hsr_slave_1 entered promiscuous mode [ 185.654037][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.662001][ T7012] Cannot create hsr debugfs directory [ 185.717382][ T6965] device hsr_slave_0 entered promiscuous mode [ 185.774035][ T6965] device hsr_slave_1 entered promiscuous mode [ 185.813696][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.821280][ T6965] Cannot create hsr debugfs directory [ 185.926972][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.942052][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.953224][ T7141] device bridge_slave_0 entered promiscuous mode [ 185.985675][ T7323] chnl_net:caif_netlink_parms(): no params data found [ 186.022018][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.030129][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.042051][ T7141] device bridge_slave_1 entered promiscuous mode [ 186.130471][ T7141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.168541][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.178910][ T7141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.294398][ T7141] team0: Port device team_slave_0 added [ 186.320043][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.328997][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.341420][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.353155][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.362890][ T7323] device bridge_slave_0 entered promiscuous mode [ 186.372107][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.379504][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.387791][ T7323] device bridge_slave_1 entered promiscuous mode [ 186.402260][ T7141] team0: Port device team_slave_1 added [ 186.417952][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.426226][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.437092][ T7291] device bridge_slave_0 entered promiscuous mode [ 186.467102][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.491287][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.501379][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.511169][ T7291] device bridge_slave_1 entered promiscuous mode [ 186.535778][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.542786][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.571030][ T7141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.586968][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.594564][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.621730][ T7141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.636898][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.647603][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.658651][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.667648][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.675045][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.717479][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.739717][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.752028][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.761939][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.774953][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.782016][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.795727][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.849569][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.899343][ T7141] device hsr_slave_0 entered promiscuous mode [ 186.944767][ T7141] device hsr_slave_1 entered promiscuous mode [ 186.983862][ T7141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.991463][ T7141] Cannot create hsr debugfs directory [ 186.998288][ T6965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.046540][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.059192][ T7323] team0: Port device team_slave_0 added [ 187.088154][ T7291] team0: Port device team_slave_0 added [ 187.094856][ T6965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.147107][ T6965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.189305][ T7323] team0: Port device team_slave_1 added [ 187.206041][ T7291] team0: Port device team_slave_1 added [ 187.232360][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.241370][ T6965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.348020][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.356724][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.385336][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.399126][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.407846][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.435139][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.447637][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.457538][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.485179][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.501800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.515583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.526020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.551085][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.559265][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.586584][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.604795][ T7012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.661236][ T7012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.712834][ T7012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.770808][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.780088][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.828712][ T7323] device hsr_slave_0 entered promiscuous mode [ 187.884739][ T7323] device hsr_slave_1 entered promiscuous mode [ 187.923867][ T7323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.931582][ T7323] Cannot create hsr debugfs directory [ 187.937630][ T7012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.016543][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.026191][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.037194][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.047961][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.146920][ T7291] device hsr_slave_0 entered promiscuous mode [ 188.202186][ T7291] device hsr_slave_1 entered promiscuous mode [ 188.253642][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.261312][ T7291] Cannot create hsr debugfs directory [ 188.387502][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.420381][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.428460][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.579289][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.588787][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.599648][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.608381][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.623199][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.632752][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.647758][ T6832] device veth0_vlan entered promiscuous mode [ 188.734207][ T6832] device veth1_vlan entered promiscuous mode [ 188.778916][ T7141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.830574][ T7141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.899054][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.909577][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.927187][ T7141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.979144][ T7141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.082005][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.097828][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.109251][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.120332][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.130885][ T7323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.176555][ T7323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.254455][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.262721][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.277637][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.294015][ T6965] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.294290][ T7323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.349073][ T7323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.467405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.476506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.487699][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.497238][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.507019][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.514229][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.522331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.531981][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.540913][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.548092][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.556824][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.565930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.574907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.583723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.592129][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.599257][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.607535][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.616768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.625667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.634770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.643282][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.650440][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.659759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.667939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.676569][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.710258][ T7291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.751375][ T7291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.796169][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.808595][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.817822][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.827518][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.836897][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.853773][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.862621][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.874751][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.886306][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.896905][ T6832] device veth0_macvtap entered promiscuous mode [ 189.906738][ T7291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.961444][ T7012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.974346][ T7012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.991842][ T6832] device veth1_macvtap entered promiscuous mode [ 190.010380][ T7291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.075934][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.085821][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.094800][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.104017][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.112695][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.123092][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.132383][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.142011][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.181123][ T6965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.194291][ T6965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.225925][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.238487][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.257985][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.293509][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.302382][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.312314][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.321517][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.347050][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.372690][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.387355][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.399467][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.429525][ T7141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.437824][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.449298][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.529829][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.617993][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.627947][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.638643][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.648635][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.661728][ T7141] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.752512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.762712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.772283][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.779456][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.788433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.797277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.808147][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.817467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.826578][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.906891][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 20:45:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/102, 0x66}], 0x1, 0x0) [ 190.947397][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.976634][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 20:45:31 executing program 0: [ 191.004828][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.012087][ T2498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.033812][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.043118][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.090687][ T7012] device veth0_vlan entered promiscuous mode [ 191.127796][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 20:45:31 executing program 0: [ 191.147120][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.163046][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.179780][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:45:31 executing program 0: [ 191.210993][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.228165][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.249774][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.321329][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.336896][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.370733][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.384553][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.405496][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 20:45:31 executing program 0: [ 191.415681][ T7012] device veth1_vlan entered promiscuous mode [ 191.441137][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.457696][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.476783][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 20:45:32 executing program 0: [ 191.493891][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.510142][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.519623][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.526978][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.567285][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 20:45:32 executing program 0: [ 191.619622][ T6965] device veth0_vlan entered promiscuous mode [ 191.635260][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.658710][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.678675][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.690805][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.707940][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.740309][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.747595][ T3097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.762410][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.804985][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.836082][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.850189][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.859603][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.872525][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.882107][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.897881][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.909347][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.920728][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.935248][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.945258][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.988048][ T6965] device veth1_vlan entered promiscuous mode [ 192.000499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.011085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.021612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.031716][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.039102][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.047771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.057347][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.067317][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.074463][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.082531][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.091234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.100041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.108759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.118120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.127093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.142871][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.167932][ T7141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.180416][ T7012] device veth0_macvtap entered promiscuous mode [ 192.189461][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.201537][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.210104][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.222296][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.230363][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.239901][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.268977][ T7012] device veth1_macvtap entered promiscuous mode [ 192.294889][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.303078][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.316866][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.327156][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.336391][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.346912][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.392541][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.420607][ T6965] device veth0_macvtap entered promiscuous mode [ 192.454390][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.468786][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.477454][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.494316][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.510590][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.520871][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.529501][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.539469][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.553066][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.564870][ T6965] device veth1_macvtap entered promiscuous mode [ 192.574693][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.590234][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.605258][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.618320][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.631639][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.640513][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.654784][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.677619][ T7291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.690814][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.727120][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.747562][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.760276][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.770087][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.779862][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.790292][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.800133][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.825195][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.836115][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.847176][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.856072][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.866604][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.882915][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.894130][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.905025][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.917304][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.929424][ T7141] device veth0_vlan entered promiscuous mode [ 192.964699][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.977287][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.989233][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.999882][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.010076][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.021231][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.032966][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.123485][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.132390][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.144575][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.152438][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.169363][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.190692][ T7141] device veth1_vlan entered promiscuous mode [ 193.288143][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.297674][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.311068][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.469916][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.571057][ T7323] device veth0_vlan entered promiscuous mode 20:45:34 executing program 1: 20:45:34 executing program 0: [ 193.642471][ T7141] device veth0_macvtap entered promiscuous mode [ 193.671370][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.694810][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.730910][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.760237][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.772022][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.781535][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.791840][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.817079][ T7141] device veth1_macvtap entered promiscuous mode [ 193.836575][ T7323] device veth1_vlan entered promiscuous mode [ 193.849654][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.859654][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.876139][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.901084][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.988707][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.007284][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.020611][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.049987][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.067911][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.081056][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.098870][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.111552][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.127743][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.138260][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.149695][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.161985][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.172514][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.185025][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.198784][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.207860][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.217163][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.226701][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.235622][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.244762][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.253979][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.263738][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.271726][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.296098][ T7323] device veth0_macvtap entered promiscuous mode [ 194.305604][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.314880][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.324850][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.342701][ T7291] device veth0_vlan entered promiscuous mode [ 194.364158][ T7323] device veth1_macvtap entered promiscuous mode [ 194.381926][ T7291] device veth1_vlan entered promiscuous mode [ 194.480157][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.488877][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.498569][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.601878][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.621843][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:45:35 executing program 3: [ 194.642564][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.660523][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.671358][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.695004][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.728405][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.760538][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.774926][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.792647][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.804595][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.826346][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.839518][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.851001][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.865221][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.876882][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.888938][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.900190][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.919375][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.935228][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.951292][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.962013][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.971223][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.980786][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.994424][ T7291] device veth0_macvtap entered promiscuous mode [ 195.029872][ T7291] device veth1_macvtap entered promiscuous mode [ 195.214545][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.236618][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.256560][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.285234][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.308355][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.325458][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.337133][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.348601][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.366468][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.380275][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.423882][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.445831][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.456693][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.469219][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.480995][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.495915][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.512592][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.527635][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.538284][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.552467][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.567413][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.577791][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.589175][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.601691][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.616714][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.631444][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.666129][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.676373][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:45:36 executing program 4: 20:45:36 executing program 2: 20:45:36 executing program 1: 20:45:36 executing program 0: 20:45:36 executing program 3: 20:45:36 executing program 5: 20:45:36 executing program 1: 20:45:36 executing program 5: 20:45:36 executing program 3: 20:45:36 executing program 2: 20:45:36 executing program 0: 20:45:36 executing program 4: 20:45:36 executing program 2: 20:45:36 executing program 3: 20:45:36 executing program 1: 20:45:36 executing program 5: 20:45:36 executing program 4: 20:45:36 executing program 0: 20:45:36 executing program 3: 20:45:36 executing program 2: 20:45:36 executing program 1: 20:45:36 executing program 4: 20:45:36 executing program 5: 20:45:36 executing program 0: 20:45:37 executing program 1: 20:45:37 executing program 3: 20:45:37 executing program 2: 20:45:37 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:37 executing program 5: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:45:37 executing program 0: 20:45:37 executing program 1: 20:45:37 executing program 3: 20:45:37 executing program 2: 20:45:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) 20:45:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5457, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "e9e13ec3c4f1f830a83bcf48e7334ecaf14d74"}) 20:45:37 executing program 5: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:45:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:37 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000090601040000000000000000eb00000805000100070000000900020073797a320000000005000100070000000900010073797a310000000005000100070000000900020073797a310000000005000100070000002800ff0f060004404e2000000600053c4e24742417ce8070cd23ffffffff00000800084000000060"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 196.948896][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.963325][ T3097] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 197.004087][ C1] hrtimer: interrupt took 34104 ns [ 197.018878][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.393584][ T3097] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.593516][ T3097] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 197.763322][ T3097] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 197.776709][ T3097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.786007][ T3097] usb 5-1: Product: syz [ 197.790356][ T3097] usb 5-1: Manufacturer: syz [ 197.801636][ T3097] usb 5-1: SerialNumber: syz [ 197.856436][ T3097] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 198.059467][ T3097] usb 5-1: USB disconnect, device number 2 [ 198.833592][ T3098] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 199.233528][ T3098] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.433142][ T3098] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 20:45:40 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 199.603247][ T3098] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 199.612299][ T3098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.621655][ T3098] usb 5-1: Product: syz [ 199.626508][ T3098] usb 5-1: Manufacturer: syz [ 199.631106][ T3098] usb 5-1: SerialNumber: syz 20:45:40 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000fe00010902240001010000000904"], 0x0) 20:45:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:40 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000090601040000000000000000eb00000805000100070000000900020073797a320000000005000100070000000900010073797a310000000005000100070000000900020073797a310000000005000100070000002800ff0f060004404e2000000600053c4e24742417ce8070cd23ffffffff00000800084000000060"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) 20:45:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 199.693459][ T3098] usb 5-1: can't set config #1, error -71 [ 199.728644][ T3098] usb 5-1: USB disconnect, device number 3 [ 199.766703][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:45:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:40 executing program 1: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) [ 200.003025][ T2498] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 200.033921][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:45:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendfile(0xffffffffffffffff, r3, 0x0, 0x4ffc) [ 200.183082][ T3098] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 200.220648][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.242867][ T2498] usb 1-1: Using ep0 maxpacket: 8 [ 200.293072][ T12] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 200.363150][ T2498] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.464864][ T2498] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 200.489679][ T2498] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 200.523055][ T2498] usb 1-1: Product: syz [ 200.594484][ T3098] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.604275][ T2498] hub 1-1:1.0: bad descriptor, ignoring hub [ 200.610300][ T2498] hub: probe of 1-1:1.0 failed with error -5 [ 200.713274][ T12] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.803057][ T3098] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.915197][ T12] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.953401][ T3097] usb 1-1: USB disconnect, device number 2 [ 200.973170][ T3098] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 200.983400][ T3098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.991481][ T3098] usb 5-1: Product: syz [ 200.996266][ T3098] usb 5-1: Manufacturer: syz [ 201.000883][ T3098] usb 5-1: SerialNumber: syz [ 201.044645][ T3098] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 201.083604][ T12] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 201.093840][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.102103][ T12] usb 2-1: Product: syz [ 201.108209][ T12] usb 2-1: Manufacturer: syz [ 201.115302][ T12] usb 2-1: SerialNumber: syz [ 201.163958][ T12] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 201.282027][ T2664] usb 5-1: USB disconnect, device number 4 [ 201.391394][ T2498] usb 2-1: USB disconnect, device number 2 [ 201.612779][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd 20:45:42 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 201.846663][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.875882][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 202.020220][ T12] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.122914][ T2498] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 202.123189][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 202.140136][ T12] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 202.149438][ T12] usb 1-1: Product: syz [ 202.203751][ T12] hub 1-1:1.0: bad descriptor, ignoring hub [ 202.209756][ T12] hub: probe of 1-1:1.0 failed with error -5 20:45:42 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000fe00010902240001010000000904"], 0x0) 20:45:42 executing program 1: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendfile(0xffffffffffffffff, r3, 0x0, 0x4ffc) 20:45:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 202.490846][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.522921][ T2498] usb 5-1: unable to get BOS descriptor or descriptor too short 20:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendfile(0xffffffffffffffff, r3, 0x0, 0x4ffc) 20:45:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 202.541450][ T2664] usb 1-1: USB disconnect, device number 3 [ 202.634190][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 202.733031][ T2498] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.792733][ T3098] usb 2-1: new full-speed USB device number 3 using dummy_hcd 20:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) [ 202.852710][ T2664] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.923065][ T2498] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 202.940956][ T2498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.952993][ T2498] usb 5-1: Product: syz [ 202.974001][ T2498] usb 5-1: Manufacturer: syz [ 202.985235][ T2498] usb 5-1: SerialNumber: syz [ 203.039557][ T2498] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 203.112717][ T2664] usb 1-1: Using ep0 maxpacket: 8 [ 203.237597][ T2664] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.243132][ T3098] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.289716][ T2482] usb 5-1: USB disconnect, device number 5 [ 203.322887][ T2664] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 203.338478][ T2664] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 203.352022][ T2664] usb 1-1: Product: syz [ 203.405804][ T2664] hub 1-1:1.0: bad descriptor, ignoring hub [ 203.411925][ T2664] hub: probe of 1-1:1.0 failed with error -5 [ 203.489885][ T3098] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 203.702770][ T3098] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 203.711951][ T3098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.721613][ T3098] usb 2-1: Product: syz [ 203.726884][ T3098] usb 2-1: Manufacturer: syz [ 203.731668][ T3098] usb 2-1: SerialNumber: syz [ 203.743095][ T2664] usb 1-1: USB disconnect, device number 4 20:45:44 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 203.796323][ T3098] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 204.041537][ T2498] usb 2-1: USB disconnect, device number 3 20:45:44 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000fe00010902240001010000000904"], 0x0) [ 204.193067][ T3098] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 204.452788][ T2513] usb 1-1: new high-speed USB device number 5 using dummy_hcd 20:45:45 executing program 1: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:45 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4ffc) [ 204.642766][ T3098] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.702774][ T2513] usb 1-1: Using ep0 maxpacket: 8 20:45:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4ffc) [ 204.822933][ T2513] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.869603][ T3098] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 20:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4ffc) [ 204.917009][ T2664] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 204.932959][ T2513] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 204.964105][ T2513] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 204.998268][ T2513] usb 1-1: Product: syz [ 205.053353][ T2513] hub 1-1:1.0: bad descriptor, ignoring hub [ 205.061037][ T2513] hub: probe of 1-1:1.0 failed with error -5 [ 205.092958][ T3098] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 205.120182][ T3098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.162727][ T3098] usb 5-1: Product: syz [ 205.181695][ T3098] usb 5-1: Manufacturer: syz [ 205.198379][ T3098] usb 5-1: SerialNumber: syz [ 205.263970][ T3098] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 205.352791][ T2664] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.453205][ T2482] usb 1-1: USB disconnect, device number 5 [ 205.520769][ T2482] usb 5-1: USB disconnect, device number 6 [ 205.552925][ T2664] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.742880][ T2664] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 205.752317][ T2664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.765856][ T2664] usb 2-1: Product: syz [ 205.770766][ T2664] usb 2-1: Manufacturer: syz [ 205.776938][ T2664] usb 2-1: SerialNumber: syz [ 205.826082][ T2664] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 20:45:46 executing program 4: 20:45:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) [ 206.048313][ T2664] usb 2-1: USB disconnect, device number 4 20:45:47 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:47 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:47 executing program 4: 20:45:47 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000fe00010902240001010000000904"], 0x0) 20:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:47 executing program 4: 20:45:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:47 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) [ 206.902559][ T3098] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.942766][ T2482] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 207.152651][ T3098] usb 1-1: Using ep0 maxpacket: 8 [ 207.207148][ T2482] usb 2-1: Using ep0 maxpacket: 8 [ 207.222566][ T2513] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 207.298890][ T3098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.382634][ T2482] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.402690][ T3098] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 207.412960][ T3098] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 207.422133][ T3098] usb 1-1: Product: syz [ 207.462780][ T2513] usb 5-1: Using ep0 maxpacket: 8 [ 207.492811][ T2482] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.507981][ T3098] hub 1-1:1.0: bad descriptor, ignoring hub [ 207.522678][ T3098] hub: probe of 1-1:1.0 failed with error -5 [ 207.635709][ T2513] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.702715][ T2482] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 207.712629][ T2482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.722829][ T2513] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.726302][ T2482] usb 2-1: Product: syz [ 207.742539][ T2482] usb 2-1: Manufacturer: syz [ 207.747189][ T2482] usb 2-1: SerialNumber: syz [ 207.793954][ T2482] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 207.832755][ T2498] usb 1-1: USB disconnect, device number 6 [ 207.902751][ T2513] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 207.912008][ T2513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.921425][ T2513] usb 5-1: Product: syz [ 207.931181][ T2513] usb 5-1: Manufacturer: syz [ 207.935952][ T2513] usb 5-1: SerialNumber: syz [ 207.983475][ T2513] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 208.011316][ T2482] usb 2-1: USB disconnect, device number 5 [ 208.186059][ T2498] usb 5-1: USB disconnect, device number 7 20:45:49 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 20:45:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:49 executing program 0: 20:45:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:49 executing program 0: 20:45:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:49 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:49 executing program 0: 20:45:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 209.092416][ T3098] usb 5-1: new high-speed USB device number 8 using dummy_hcd 20:45:49 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 20:45:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:49 executing program 0: syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 20:45:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x4ffc) 20:45:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x4ffc) 20:45:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 209.373082][ T3098] usb 5-1: Using ep0 maxpacket: 8 [ 209.552657][ T3098] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.639892][ T3098] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.842785][ T3098] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 209.851964][ T3098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.882384][ T3098] usb 5-1: Product: syz [ 209.886618][ T3098] usb 5-1: Manufacturer: syz [ 209.897889][ T3098] usb 5-1: SerialNumber: syz [ 209.948529][ T3098] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 210.146267][ T2498] usb 5-1: USB disconnect, device number 8 20:45:51 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x4ffc) 20:45:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:51 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:51 executing program 0: syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 20:45:51 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 20:45:51 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:51 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:51 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:51 executing program 3: r0 = socket(0x0, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 210.934797][ C1] IPv6: macvlan0: IPv6 duplicate address ::ffff:255.255.255.255 used by aa:aa:aa:aa:aa:31 detected! [ 210.992612][ T2482] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.252359][ T2482] usb 5-1: Using ep0 maxpacket: 8 [ 211.432504][ T2482] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.522681][ T2482] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 211.704404][ T2482] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 211.713655][ T2482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.724160][ T2482] usb 5-1: Product: syz [ 211.728389][ T2482] usb 5-1: Manufacturer: syz [ 211.734519][ T2482] usb 5-1: SerialNumber: syz [ 211.783766][ T2482] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 211.986072][ T2482] usb 5-1: USB disconnect, device number 9 20:45:53 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:53 executing program 3: r0 = socket(0x0, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:53 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:53 executing program 4: syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 20:45:53 executing program 0: syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 20:45:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:53 executing program 3: r0 = socket(0x0, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:53 executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 212.812249][ T12] usb 2-1: new high-speed USB device number 6 using dummy_hcd 20:45:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:53 executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:53 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) [ 213.052252][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 213.218990][ T12] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 213.452505][ T12] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 213.467811][ T2664] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 213.469053][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.526880][ T12] usb 2-1: Product: syz [ 213.532847][ T12] usb 2-1: Manufacturer: syz [ 213.540435][ T12] usb 2-1: SerialNumber: syz [ 213.583298][ T12] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 213.752199][ T2664] usb 1-1: device descriptor read/64, error 18 [ 213.789845][ T12] usb 2-1: USB disconnect, device number 6 [ 214.142272][ T2664] usb 1-1: device descriptor read/64, error 18 20:45:54 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:54 executing program 4: syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 20:45:54 executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:54 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) [ 214.412190][ T2664] usb 1-1: new high-speed USB device number 8 using dummy_hcd 20:45:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:55 executing program 5: socket(0x11, 0x800000003, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 214.672708][ T12] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.693226][ T2664] usb 1-1: device descriptor read/64, error 18 20:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) [ 214.922147][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 215.042481][ T12] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 215.097791][ T2664] usb 1-1: device descriptor read/64, error 18 [ 215.229666][ T2664] usb usb1-port1: attempt power cycle [ 215.242697][ T12] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 215.259828][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.268451][ T12] usb 2-1: Product: syz [ 215.279811][ T12] usb 2-1: Manufacturer: syz [ 215.285192][ T12] usb 2-1: SerialNumber: syz [ 215.343389][ T12] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 215.545739][ T2513] usb 2-1: USB disconnect, device number 7 [ 215.942114][ T2664] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.120244][ T2664] usb 1-1: device descriptor read/8, error -61 20:45:56 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 20:45:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:56 executing program 4: syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 20:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:56 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:56 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) [ 216.343432][ T2664] usb 1-1: device descriptor read/8, error -71 20:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) 20:45:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4ffc) [ 216.492177][ T2513] usb 2-1: new high-speed USB device number 8 using dummy_hcd 20:45:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 216.742065][ T2513] usb 2-1: Using ep0 maxpacket: 8 [ 216.832344][ T2664] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 216.872397][ T2513] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.002496][ T2664] usb 1-1: device descriptor read/8, error -61 [ 217.042302][ T2513] usb 2-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 217.051387][ T2513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.061342][ T2513] usb 2-1: Product: syz [ 217.066144][ T2513] usb 2-1: Manufacturer: syz [ 217.070756][ T2513] usb 2-1: SerialNumber: syz [ 217.113585][ T2513] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 217.282143][ T2664] usb 1-1: device descriptor read/8, error -61 [ 217.324239][ T12] usb 2-1: USB disconnect, device number 8 [ 217.402328][ T2664] usb usb1-port1: unable to enumerate USB device 20:45:59 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 20:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:59 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:59 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:45:59 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:45:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:45:59 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) [ 219.561923][ T2482] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 219.572075][ T2664] usb 2-1: new high-speed USB device number 9 using dummy_hcd 20:46:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 219.672461][ T2498] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 219.865105][ T2664] usb 2-1: device descriptor read/64, error 18 [ 219.952203][ T2482] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.961936][ T2498] usb 1-1: device descriptor read/64, error 18 [ 220.152183][ T2482] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 220.161356][ T2482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.169890][ T2482] usb 5-1: Product: syz [ 220.174540][ T2482] usb 5-1: Manufacturer: syz [ 220.179186][ T2482] usb 5-1: SerialNumber: syz [ 220.233512][ T2482] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 220.252955][ T2664] usb 2-1: device descriptor read/64, error 18 [ 220.361941][ T2498] usb 1-1: device descriptor read/64, error 18 [ 220.443005][ T3098] usb 5-1: USB disconnect, device number 10 [ 220.521883][ T2664] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.631865][ T2498] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 220.791864][ T2664] usb 2-1: device descriptor read/64, error 18 [ 220.901918][ T2498] usb 1-1: device descriptor read/64, error 18 [ 221.181915][ T2664] usb 2-1: device descriptor read/64, error 18 [ 221.291836][ T2498] usb 1-1: device descriptor read/64, error 18 [ 221.302453][ T2664] usb usb2-port1: attempt power cycle [ 221.412830][ T2498] usb usb1-port1: attempt power cycle [ 222.021821][ T2664] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.112007][ T2664] usb 2-1: Invalid ep0 maxpacket: 0 [ 222.121939][ T2498] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.261802][ T2664] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 222.292135][ T2498] usb 1-1: device descriptor read/8, error -61 20:46:02 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 20:46:02 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:02 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:02 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) [ 222.519546][ T2498] usb 1-1: device descriptor read/8, error -71 20:46:03 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 222.743116][ T17] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 222.762056][ T2664] usb 2-1: device not accepting address 12, error -71 [ 222.773965][ T2664] usb usb2-port1: unable to enumerate USB device [ 223.031988][ T2498] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.102042][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 223.151900][ T2664] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 223.201822][ T2498] usb 1-1: device descriptor read/8, error -61 [ 223.272339][ T17] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 223.281404][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.290909][ T17] usb 5-1: Product: syz [ 223.295929][ T17] usb 5-1: Manufacturer: syz [ 223.300536][ T17] usb 5-1: SerialNumber: syz [ 223.342998][ T17] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 223.431999][ T2664] usb 2-1: device descriptor read/64, error 18 [ 223.473816][ T2498] usb 1-1: device descriptor read/8, error -61 [ 223.544946][ T17] usb 5-1: USB disconnect, device number 11 [ 223.596079][ T2498] usb usb1-port1: unable to enumerate USB device [ 223.821694][ T2664] usb 2-1: device descriptor read/64, error 18 [ 224.091724][ T2664] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 224.381745][ T2664] usb 2-1: device descriptor read/64, error 18 [ 224.821691][ T2664] usb 2-1: device descriptor read/64, error 18 [ 224.941865][ T2664] usb usb2-port1: attempt power cycle 20:46:05 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 20:46:05 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:05 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:05 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:06 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:06 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 225.811607][ T2513] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 225.871744][ T2664] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 225.948182][ T3098] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 225.971726][ T2664] usb 2-1: Invalid ep0 maxpacket: 0 [ 226.121700][ T2664] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 226.171800][ T2513] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 226.221964][ T2664] usb 2-1: Invalid ep0 maxpacket: 0 [ 226.229423][ T2664] usb usb2-port1: unable to enumerate USB device [ 226.241785][ T3098] usb 1-1: device descriptor read/64, error 18 [ 226.352643][ T2513] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 226.362074][ T2513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.370113][ T2513] usb 5-1: Product: syz [ 226.376184][ T2513] usb 5-1: Manufacturer: syz [ 226.380890][ T2513] usb 5-1: SerialNumber: syz [ 226.422638][ T2513] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 226.624653][ T2664] usb 5-1: USB disconnect, device number 12 [ 226.661702][ T3098] usb 1-1: device descriptor read/64, error 18 [ 226.951609][ T3098] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.231885][ T3098] usb 1-1: device descriptor read/64, error 18 [ 227.651542][ T3098] usb 1-1: device descriptor read/64, error 18 [ 227.771657][ T3098] usb usb1-port1: attempt power cycle 20:46:09 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 20:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:09 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:09 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:09 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 228.501608][ T3098] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 228.621644][ T3098] usb 1-1: device descriptor read/8, error -71 20:46:09 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, 0x0, 0x0) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, 0x0, 0x0) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:09 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 228.831703][ T3098] usb 1-1: device descriptor read/8, error -71 [ 228.871613][ T2664] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 229.159960][ T2664] usb 5-1: device descriptor read/64, error 18 [ 229.321485][ T3098] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 229.491668][ T3098] usb 1-1: device descriptor read/8, error -61 [ 229.551663][ T2664] usb 5-1: device descriptor read/64, error 18 [ 229.801831][ T3098] usb 1-1: device descriptor read/8, error -61 [ 229.821512][ T2664] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 229.921705][ T3098] usb usb1-port1: unable to enumerate USB device [ 230.091477][ T2664] usb 5-1: device descriptor read/64, error 18 [ 230.481397][ T2664] usb 5-1: device descriptor read/64, error 18 [ 230.601654][ T2664] usb usb5-port1: attempt power cycle [ 231.311503][ T2664] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 231.401557][ T2664] usb 5-1: Invalid ep0 maxpacket: 0 [ 231.551390][ T2664] usb 5-1: new full-speed USB device number 16 using dummy_hcd 20:46:12 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000"], 0x0) 20:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, 0x0, 0x0) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:12 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) [ 232.031424][ T2664] usb 5-1: device not accepting address 16, error -71 [ 232.043458][ T2664] usb usb5-port1: unable to enumerate USB device [ 232.051682][ T2498] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 232.306818][ T2498] usb 1-1: Using ep0 maxpacket: 8 [ 232.351698][ T2498] usb 1-1: no configurations [ 232.356366][ T2498] usb 1-1: can't read configurations, error -22 [ 232.431535][ T2664] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 232.521572][ T2498] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 232.701350][ T2664] usb 5-1: device descriptor read/64, error 18 [ 232.761362][ T2498] usb 1-1: Using ep0 maxpacket: 8 [ 232.801628][ T2498] usb 1-1: no configurations [ 232.806249][ T2498] usb 1-1: can't read configurations, error -22 [ 232.813103][ T2498] usb usb1-port1: attempt power cycle [ 233.091332][ T2664] usb 5-1: device descriptor read/64, error 18 [ 233.361388][ T2664] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 233.521284][ T2498] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 233.611539][ T2498] usb 1-1: Using ep0 maxpacket: 8 [ 233.631582][ T2664] usb 5-1: device descriptor read/64, error 18 [ 233.651613][ T2498] usb 1-1: no configurations [ 233.656389][ T2498] usb 1-1: can't read configurations, error -22 [ 233.811380][ T2498] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 233.901471][ T2498] usb 1-1: Using ep0 maxpacket: 8 [ 233.941548][ T2498] usb 1-1: no configurations [ 233.946392][ T2498] usb 1-1: can't read configurations, error -22 [ 233.957529][ T2498] usb usb1-port1: unable to enumerate USB device [ 234.021257][ T2664] usb 5-1: device descriptor read/64, error 18 [ 234.141502][ T2664] usb usb5-port1: attempt power cycle 20:46:15 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000"], 0x0) 20:46:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4ffc) 20:46:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:15 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 20:46:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4ffc) 20:46:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 20:46:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 235.071879][ T2664] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 235.171483][ T2664] usb 5-1: Invalid ep0 maxpacket: 0 [ 235.176867][ T17] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.335405][ T2664] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 235.431286][ T2664] usb 5-1: Invalid ep0 maxpacket: 0 [ 235.436673][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 235.443946][ T2664] usb usb5-port1: unable to enumerate USB device [ 235.481517][ T17] usb 1-1: no configurations [ 235.486184][ T17] usb 1-1: can't read configurations, error -22 [ 235.671217][ T17] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 235.911217][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 235.951419][ T17] usb 1-1: no configurations [ 235.956167][ T17] usb 1-1: can't read configurations, error -22 [ 235.964332][ T17] usb usb1-port1: attempt power cycle [ 236.671156][ T17] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 236.761528][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 236.801421][ T17] usb 1-1: no configurations [ 236.806186][ T17] usb 1-1: can't read configurations, error -22 [ 236.961212][ T17] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 237.051379][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 237.091477][ T17] usb 1-1: no configurations [ 237.096164][ T17] usb 1-1: can't read configurations, error -22 [ 237.103785][ T17] usb usb1-port1: unable to enumerate USB device 20:46:18 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000"], 0x0) 20:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4ffc) 20:46:18 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 20:46:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:18 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) 20:46:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x8800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 20:46:18 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 20:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4ffc) 20:46:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:18 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) socket$inet6(0xa, 0x80003, 0x7) 20:46:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x29c}, &(0x7f0000000100)=0xc) [ 238.171249][ T12] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 238.441158][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 238.484606][ T12] usb 1-1: no configurations [ 238.489288][ T12] usb 1-1: can't read configurations, error -22 [ 238.661138][ T12] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 238.911157][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 238.961180][ T12] usb 1-1: no configurations [ 238.965821][ T12] usb 1-1: can't read configurations, error -22 [ 238.976818][ T12] usb usb1-port1: attempt power cycle [ 239.701073][ T12] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 239.801772][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 239.851255][ T12] usb 1-1: no configurations [ 239.855883][ T12] usb 1-1: can't read configurations, error -22 [ 240.031115][ T12] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 240.121145][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 240.171236][ T12] usb 1-1: no configurations [ 240.175885][ T12] usb 1-1: can't read configurations, error -22 [ 240.183589][ T12] usb usb1-port1: unable to enumerate USB device 20:46:21 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000fe000109022400"], 0x0) 20:46:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x8800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 20:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4ffc) 20:46:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) 20:46:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0x8) 20:46:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) [ 240.976456][ T9170] ubi0: attaching mtd0 20:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4ffc) 20:46:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) 20:46:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) [ 241.022345][ T9170] ubi0: scanning is finished [ 241.062120][ T9170] ubi0: empty MTD device detected 20:46:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4ffc) [ 241.297985][ T9170] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 241.318863][ T9170] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 241.319594][ T3098] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 241.341620][ T9170] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 241.371255][ T9170] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 241.378893][ T9170] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 241.386945][ T9170] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 241.398236][ T9170] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3107960206 [ 241.420502][ T9170] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 241.437377][ T9192] ubi0: background thread "ubi_bgt0d" started, PID 9192 [ 241.616581][ T3098] usb 1-1: Using ep0 maxpacket: 8 [ 241.745674][ T3098] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.765456][ T3098] usb 1-1: config 0 has no interfaces? [ 241.861361][ T3098] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 241.870433][ T3098] usb 1-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0 [ 241.879287][ T3098] usb 1-1: Product: syz [ 241.885337][ T3098] usb 1-1: config 0 descriptor?? [ 242.138133][ T17] usb 1-1: USB disconnect, device number 31 20:46:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) 20:46:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) 20:46:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x0) 20:46:23 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000fe000109022400"], 0x0) 20:46:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x8800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 20:46:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x0) [ 242.721428][ T9222] ubi0: detaching mtd0 [ 242.768611][ T9222] ================================================================== [ 242.777151][ T9222] BUG: KASAN: use-after-free in uif_close+0x15e/0x190 [ 242.783939][ T9222] Read of size 4 at addr ffff88805afec9e8 by task syz-executor.4/9222 [ 242.792092][ T9222] [ 242.794439][ T9222] CPU: 0 PID: 9222 Comm: syz-executor.4 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 242.804332][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.814485][ T9222] Call Trace: [ 242.817907][ T9222] dump_stack+0x18f/0x20d [ 242.822262][ T9222] ? uif_close+0x15e/0x190 [ 242.826696][ T9222] ? uif_close+0x15e/0x190 [ 242.831258][ T9222] print_address_description.constprop.0.cold+0xd3/0x413 [ 242.838339][ T9222] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 242.844456][ T9222] ? vprintk_func+0x97/0x1a6 [ 242.849074][ T9222] ? uif_close+0x15e/0x190 [ 242.853514][ T9222] kasan_report.cold+0x1f/0x37 [ 242.858304][ T9222] ? uif_close+0x15e/0x190 [ 242.862745][ T9222] uif_close+0x15e/0x190 [ 242.867018][ T9222] ubi_detach_mtd_dev+0x226/0x432 [ 242.872066][ T9222] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 242.876848][ T9222] ? vol_cdev_llseek+0x160/0x160 [ 242.881865][ T9222] ? __x64_sys_futex+0x380/0x4f0 [ 242.886863][ T9222] ? vol_cdev_llseek+0x160/0x160 [ 242.891998][ T9222] ksys_ioctl+0x11a/0x180 [ 242.896354][ T9222] __x64_sys_ioctl+0x6f/0xb0 [ 242.901011][ T9222] do_syscall_64+0xf6/0x7d0 [ 242.905656][ T9222] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 242.911596][ T9222] RIP: 0033:0x45ca29 [ 242.915503][ T9222] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.935139][ T9222] RSP: 002b:00007fd38a1a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.943565][ T9222] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 242.951547][ T9222] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 242.959565][ T9222] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 242.967858][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 242.975847][ T9222] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007fd38a1a86d4 [ 242.983888][ T9222] [ 242.986346][ T9222] Allocated by task 9170: [ 242.990693][ T9222] save_stack+0x1b/0x40 [ 242.994871][ T9222] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 243.000523][ T9222] kmem_cache_alloc_trace+0x153/0x7d0 [ 243.005914][ T9222] ubi_attach_mtd_dev+0x2e7/0x27c0 [ 243.011045][ T9222] ctrl_cdev_ioctl+0x229/0x2b0 [ 243.015827][ T9222] ksys_ioctl+0x11a/0x180 [ 243.020219][ T9222] __x64_sys_ioctl+0x6f/0xb0 [ 243.024841][ T9222] do_syscall_64+0xf6/0x7d0 [ 243.029388][ T9222] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 243.035281][ T9222] [ 243.037616][ T9222] Freed by task 9222: [ 243.041615][ T9222] save_stack+0x1b/0x40 [ 243.045782][ T9222] __kasan_slab_free+0xf7/0x140 [ 243.050842][ T9222] kfree+0x109/0x2b0 [ 243.054847][ T9222] device_release+0x71/0x200 [ 243.059458][ T9222] kobject_put+0x1c8/0x2f0 [ 243.063994][ T9222] cdev_device_del+0x69/0x80 [ 243.068798][ T9222] uif_close+0xea/0x190 [ 243.072311][ T17] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 243.072965][ T9222] ubi_detach_mtd_dev+0x226/0x432 [ 243.085521][ T9222] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 243.090299][ T9222] ksys_ioctl+0x11a/0x180 [ 243.094650][ T9222] __x64_sys_ioctl+0x6f/0xb0 [ 243.099248][ T9222] do_syscall_64+0xf6/0x7d0 [ 243.103763][ T9222] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 243.109657][ T9222] [ 243.111992][ T9222] The buggy address belongs to the object at ffff88805afec000 [ 243.111992][ T9222] which belongs to the cache kmalloc-8k of size 8192 [ 243.126166][ T9222] The buggy address is located 2536 bytes inside of [ 243.126166][ T9222] 8192-byte region [ffff88805afec000, ffff88805afee000) [ 243.139612][ T9222] The buggy address belongs to the page: [ 243.145263][ T9222] page:ffffea00016bfb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00016bfb00 order:2 compound_mapcount:0 compound_pincount:0 [ 243.160550][ T9222] flags: 0xfffe0000010200(slab|head) [ 243.165856][ T9222] raw: 00fffe0000010200 ffffea0002348e08 ffff8880aa001b50 ffff8880aa0021c0 [ 243.174484][ T9222] raw: 0000000000000000 ffff88805afec000 0000000100000001 0000000000000000 [ 243.183079][ T9222] page dumped because: kasan: bad access detected [ 243.189506][ T9222] [ 243.191840][ T9222] Memory state around the buggy address: [ 243.197488][ T9222] ffff88805afec880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.205563][ T9222] ffff88805afec900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 20:46:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) 20:46:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}]}}}]}, 0x58}}, 0x0) 20:46:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x0) 20:46:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], [], @broadcast}}]}, 0x2c}}, 0x0) 20:46:23 executing program 2: [ 243.213625][ T9222] >ffff88805afec980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.221673][ T9222] ^ [ 243.229114][ T9222] ffff88805afeca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.237169][ T9222] ffff88805afeca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.245224][ T9222] ================================================================== [ 243.253259][ T9222] Disabling lock debugging due to kernel taint [ 243.323924][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 243.340264][ T9222] Kernel panic - not syncing: panic_on_warn set ... [ 243.346908][ T9222] CPU: 0 PID: 9222 Comm: syz-executor.4 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 243.358092][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.368150][ T9222] Call Trace: [ 243.371467][ T9222] dump_stack+0x18f/0x20d [ 243.375919][ T9222] ? uif_close+0x110/0x190 [ 243.380451][ T9222] panic+0x2e3/0x75c [ 243.384399][ T9222] ? __warn_printk+0xf3/0xf3 [ 243.389073][ T9222] ? preempt_schedule_common+0x5e/0xc0 [ 243.394583][ T9222] ? uif_close+0x15e/0x190 [ 243.399011][ T9222] ? uif_close+0x15e/0x190 [ 243.403439][ T9222] ? preempt_schedule_thunk+0x16/0x18 [ 243.408868][ T9222] ? trace_hardirqs_on+0x55/0x230 [ 243.413917][ T9222] ? uif_close+0x15e/0x190 [ 243.418342][ T9222] ? uif_close+0x15e/0x190 [ 243.422790][ T9222] end_report+0x4d/0x53 [ 243.426958][ T9222] kasan_report.cold+0xd/0x37 [ 243.431643][ T9222] ? uif_close+0x15e/0x190 [ 243.436072][ T9222] uif_close+0x15e/0x190 [ 243.440335][ T9222] ubi_detach_mtd_dev+0x226/0x432 [ 243.441028][ T17] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.445395][ T9222] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 243.445409][ T9222] ? vol_cdev_llseek+0x160/0x160 [ 243.445422][ T9222] ? __x64_sys_futex+0x380/0x4f0 [ 243.445442][ T9222] ? vol_cdev_llseek+0x160/0x160 [ 243.475067][ T9222] ksys_ioctl+0x11a/0x180 [ 243.479405][ T9222] __x64_sys_ioctl+0x6f/0xb0 [ 243.484169][ T9222] do_syscall_64+0xf6/0x7d0 [ 243.488689][ T9222] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 243.494776][ T9222] RIP: 0033:0x45ca29 [ 243.498672][ T9222] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.518254][ T9222] RSP: 002b:00007fd38a1a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.526829][ T9222] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 243.535155][ T9222] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 243.543108][ T9222] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 243.551071][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 243.559028][ T9222] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007fd38a1a86d4 [ 243.568315][ T9222] Kernel Offset: disabled [ 243.572757][ T9222] Rebooting in 86400 seconds..